* Prevent XSS attacks when using wildcards in the path of the FTP URL (CVE-2008-2939). Discovered by Marc Bevand of Rapid7.
Changed paths: