Potential Security Dangers: Using a regex and the "+" sign

[decause]

The way we are loading in .csv files with relative paths may work ok for our gh-pages demo, but is def potential danger.

Shout-out @timball for the skoolins today :)

[alexyaseen]

#34
#33

[dxa4481]

@decause I don't see the security risk, can you elaborate?