[5.x] Prevent asset folder path traversal

[jasonvarga]

This prevents potential for path traversal when instantiating asset folders.