Directory traversal in DocBook

During conversion to HTML identifuers are used to form a filename without check for ../...