playframework/play — pull request #360 by ryenus (2011-10-18 05:19:20+00:00)
Title: [#690] Fix parent path detection

with os.path.relpath(path1, path2), only when it returns '..', or '../..', etc.
then we know path1 is parent of path2

regarding the pattern '^\.\.(' + os.sep + '\.\.)*$', if os.sep is '\',
we need to escape it once more