Better path traversal prevention in TemplateParser.