Fix path traversal

Merged Thom Wiggers requested to merge some_tests into master

Adds some tests, during which I found a path traversal attack. See #377 (closed).

Merge request reports