final File safeFile = new File(baseDir, "subdir/file.txt");
        final File unsafeFile = new File(baseDir, "../../../etc/passwd");

        assertTrue("Safe file should be allowed", FileUtil.isPathSafe(safeFile, baseDir));
        assertFalse("Unsafe file should be blocked", FileUtil.isPathSafe(unsafeFile, baseDir));
    }

    /**
     * Test isPathSafe with path inside base directory
     *

 * <p>
 * <strong>Thread-Safety:</strong> This class is <strong>NOT thread-safe</strong>.
 * It extends {@link LinkedHashMap} without synchronization. If multiple threads access
 * an instance concurrently, and at least one thread modifies the map structurally,
 * it must be synchronized externally.
 * </p>
 * <p>
 * For thread-safe usage, wrap with {@link java.util.Collections#synchronizedMap(Map)}:
 * </p>
 * <pre>

        @Option(name = "-s", aliases = "--sessionId", metaVar = "sessionId", usage = "Session ID")
        public String sessionId;

        /** Name for the crawling session for identification purposes. */
        @Option(name = "-n", aliases = "--name", metaVar = "name", usage = "Name")
        public String name;

        /** Comma-separated list of web configuration IDs to crawl. */

    /**
     * Validates that a given path is safe and does not attempt path traversal attacks.
     * <p>
     * This method checks if the resolved absolute path starts with the allowed base directory,
     * preventing access to files outside the intended directory through path traversal
     * techniques like "../../../etc/passwd".
     * </p>
     * <p>
     * Example usage:
     * </p>
     * <pre>

 * </ul>
 *
 * <h2>Usage Example:</h2>
 * <pre>
 * {@code
 * String escapedXml = XmlUtil.escapeXml("<tag>value</tag>");
 * Map<String, Object> dataMap = XmlUtil.getDataMap(accessResultData);
 * }
 * </pre>
 *
 * <h2>Thread Safety:</h2>
 * <p>
 * This class is thread-safe as it does not maintain any state.
 * </p>
 *
 * <h2>Dependencies:</h2>
 * <ul>

         */
        @Option(name = "-s", aliases = "--sessionId", metaVar = "sessionId", usage = "Session ID")
        protected String sessionId;

        /**
         * Name identifier for the thumbnail generation task.
         */
        @Option(name = "-n", aliases = "--name", metaVar = "name", usage = "Name")
        protected String name;

        /**
         * Path to the properties file for configuration.

        /** The session ID for the suggest creation process. */
        @Option(name = "-s", aliases = "--sessionId", metaVar = "sessionId", usage = "Session ID")
        protected String sessionId;

        /** The name of the suggest creator instance. */
        @Option(name = "-n", aliases = "--name", metaVar = "name", usage = "Name")
        protected String name;

        /** The path to the properties file for configuration. */

    }

    /**
     * Decapitalizes a string according to JavaBeans conventions.
     * Note: If the first two characters are uppercase, the string will not be decapitalized.
     * <p>
     * Usage example:
     * </p>
     *
     * <pre>
     * StringUtil.decapitalize("UserId")  = "userId"
     * StringUtil.decapitalize("ABC")     = "ABC"
     * </pre>
     *
     * @param name

 * <li>Ensure keys are securely generated and stored</li>
 * <li>For production systems with stringent security requirements, consider using authenticated encryption modes</li>
 * </ul>
 * <p>
 * <strong>Usage Example:</strong>
 * </p>
 * <pre>
 * CachedCipher cipher = new CachedCipher();
 * cipher.setKey("mySecretKey");
 *
 * // Encrypt text
 * String encrypted = cipher.encryptText("Hello World");
 *

        "java.math.*",
        "org.codelibs.*",
        "[*" // Allow arrays
    );

    /**
     * Default ObjectInputFilter that only allows safe classes to be deserialized.
     * This filter rejects potentially dangerous classes while allowing common safe types.
     */
    private static final ObjectInputFilter DEFAULT_FILTER = filterInfo -> {
        final Class<?> serialClass = filterInfo.serialClass();