fix: Reject URL path segments containing "%2e%2e"

fix: Reject URL path segments containing "%2e%2e" #383