*/
  private abstract static class Traversal<N> {
    final SuccessorsFunction<N> successorFunction;

    Traversal(SuccessorsFunction<N> successorFunction) {
      this.successorFunction = successorFunction;
    }

    static <N> Traversal<N> inGraph(SuccessorsFunction<N> graph) {
      Set<N> visited = new HashSet<>();
      return new Traversal<N>(graph) {
        @Override

        // Test simple path traversal attack
        File baseDir = new File(tempDir.toFile(), "images");
        baseDir.mkdirs();
        File maliciousFile = new File(baseDir, "../../../etc/passwd");

        Boolean result = invokeIsValidUploadPath(maliciousFile, baseDir);
        assertFalse("Path traversal with ../ should be blocked", result);
    }

    @Test

            }
            expectedBaseDir = null; // Skip path traversal check for resource files
        } else {
            throwValidationError(messages -> messages.addErrorsDesignFileIsUnsupportedType("designFileName"), this::asListHtml);
            return null;
        }

        // Validate path to prevent path traversal attacks

    /**
     * Validates that a given path is safe and does not attempt path traversal attacks.
     * <p>
     * This method checks if the resolved absolute path starts with the allowed base directory,
     * preventing access to files outside the intended directory through path traversal
     * techniques like "../../../etc/passwd".
     * </p>
     * <p>
     * Example usage:
     * </p>

   * list the nodes reachable from a given node or nodes. See the <a
   * href="https://github.com/google/guava/wiki/GraphsExplained#Graph-traversal">"Graph traversal"
   * section of the Guava User's Guide</a> for more information.
   *
   * <p>The {@link Set} returned is a "snapshot" based on the current topology of {@code graph},

        return redirect(getClass()); // no-op
    }

    /**
     * Sanitizes a filename by removing path traversal sequences and whitespace.
     *
     * @param filename the filename to sanitize
     * @return the sanitized filename
     */
    public static String sanitizeFilename(final String filename) {

            Files.createDirectories(filePath.getParent());
            final Path realParent = filePath.getParent().toRealPath();
            if (!realParent.startsWith(realBase)) {
                logger.warn("Symlink traversal detected: url={}, realParent={}, realBase={}", url, realParent, realBase);
                return;
            }
            final byte[] bytes = content.getBytes(StandardCharsets.UTF_8);

 * href="https://en.wikipedia.org/wiki/Graph_(discrete_mathematics)">graph</a>-structured data.
 *
 * <p>This interface is meant to be used as the type of a parameter to graph algorithms (such as
 * breadth first traversal) that only need a way of accessing the successors of a node in a graph.
 *
 * <h3>Usage</h3>
 *
 * Given an algorithm, for example:
 *
 * {@snippet :

                + "test_script.py";
        assertEquals(expectedPath, pythonJob.getPyFilePath());
    }

    // Test getPyFilePath with directory traversal attempt
    @Test
    public void test_getPyFilePath_withDirectoryTraversal() {
        pythonJob.filename("../../malicious.py");

        assertEquals("/etc/passwd.log", AdminLogAction.sanitizeFilename(". ./. ./etc/passwd.log"));
    }

    @Test
    public void test_sanitizeFilename_pathTraversalPatterns() {
        // Common path traversal attack patterns - multiple slashes are normalized to single
        assertEquals("/etc/passwd.log", AdminLogAction.sanitizeFilename("../etc/passwd.log"));