Merge pull request #45 from jirislav/bind-paths-too-permisive

fix: it was possible to bind paths which were not allowed

director.go

@@ -335,7 +335,7 @@ func (r *rulesDirector) isBindAllowed(l socketproxy.Logger, bind string, allowed
 		hostSrc := filepath.FromSlash(path.Clean("/" + chunks[0]))
 
 		for _, allowedPath := range allowed {
-			if strings.HasPrefix(hostSrc, allowedPath) {
+			if allowedPath == hostSrc || strings.HasPrefix(hostSrc, allowedPath + "/") {
 				return true, nil
 			}
 		}