Reject File URLs with dot or empty path segments

Paths like `/private/files/./x.txt` are rejected so one file cannot be reached under a second spelling that skips the access check.