Fix a directory traversal allowing to retrieve any file within content

[snyff]

I didn't use File.basename to allow people to use sub-directories in /content/attachments/blah/lol.png

the fix is quick and dirty but do the job based on Sinatra current protection regarding encoding and the use of the regular expression for the filename

[gma]

Cheers for that. Merged.