What's New
Frappe • fix framework

Reject `..` in file_url instead of collapsing it

SS @ssiyad · #45681 · merged 29 Oct 2026

File URLs with a .. segment are refused instead of being collapsed.