Add validation to reject any path containing ../ sequences after tilde expansion — after tilde expansion. Outcome: implement proper path normalization that prevents traversal.

06f3b9c4-0754-4583-a20d-665e26f864b2