don't allow traversing outside base dir
don't allow traversing outside base dir

The ValueError is not handled and disconnects the client, but they had it coming!
How would we do it nicely?

meteotest/hurray,meteotest/hurray