l4AgXc

#13 found a dot-dot directory traversal vulnerability in the jean example program. The mitigation there of stripping `../` from paths is incomplete, and there are still other ways to escape...