Frappe • fix framework Reject `..` in file_url instead of collapsing it SS @ssiyad · #45681 · merged 29 Oct 2026 File URLs with a .. segment are refused instead of being collapsed.