Prevent session IDs from escaping the FileStore namespace. Add a fixed filename namespace and strict session ID validation at the storage boundary, while preserving compatibility mode requirements. Acceptance: traversal-like IDs cannot read, write, delete, or detect files outside the session directory.
Prevent session IDs from escaping the FileStore namespace. Add a fixed filename namespace and strict session ID validation at the storage boundary, while preserving compatibility mode requirements. Acceptance: traversal-like IDs cannot read, write, delete, or detect files outside the session directory.