Relative paths that go up do not work

[kgiszewski]

This is a purposeful thing at the moment to keep things secure.

i.e. any relative paths with ../../ type syntax are disallowed due to the security ramifications.

Without the protection, a user could do something like ../../../web.config and see sensitive items.

There are already checks in place to only fetch .md and media (.jpg, .png, .pdf) etc. So maybe we can find a nice way to allow these types of paths.