Path traversal in a Tomcat server