The following discussion from !46042 should be addressed: - [ ] @vdesousa started a [discussion](https://gitlab.com/gitlab-org/gitlab/-/merge_requests/46042#note_442863044): > @sabrams we should add a [path_traversal check here](https://docs.gitlab.com/ee/development/secure_coding_guidelines.html#path-traversal-guidelines) (I know it's not introduced with this MR, but maybe we can do that in a follow-up)