}

    @Test
    public void test_sanitizeFilename_removesDoubleDots() {
        assertEquals("", AdminLogAction.sanitizeFilename(".."));
        assertEquals("/etc/passwd", AdminLogAction.sanitizeFilename("../etc/passwd"));
        assertEquals("/etc/passwd", AdminLogAction.sanitizeFilename("../../etc/passwd"));
        assertEquals("test.log", AdminLogAction.sanitizeFilename("..test.log"));

     * @return ActionResponse containing the log file stream
     */
    @Execute
    @Secured({ ROLE, ROLE + VIEW })
    public ActionResponse download(final String id) {
        final String filename = sanitizeFilename(new String(Base64.getDecoder().decode(id), StandardCharsets.UTF_8));
        final String logFilePath = systemHelper.getLogFilePath();
        if (StringUtil.isNotBlank(logFilePath) && isLogFilename(filename)) {