harden source of files; quote basename and dirname

Merge request reports

Loading