Directory traversal fix. I don't think it could've led to something

serious, but lets fix it anyway.

src/assets/js/blog.js

@@ -90,6 +90,7 @@
     var type = hash.slice(0, slash);
     var slug = hash.slice(slash + 1);
     if (!slug || (type !== "blog" && type !== "projects")) return;
+    if (!/^[a-z0-9_-]+$/i.test(slug)) return;
     var fragUrl = "/fragments/" + type + "/" + slug + "/";
     WM.showAt("win-" + type, fragUrl, "/fragments/" + type + "/", function (c) {
       injectShare(c, fragUrl);