}

            final Path resolved = Paths.get(exportPath, sanitized.toString()).normalize();
            final Path baseDir = Paths.get(exportPath).normalize();
            if (!resolved.startsWith(baseDir)) {
                logger.warn("Path traversal detected: url={}, resolved={}", url, resolved);
                return Paths.get(exportPath, "_invalid", hashString(url) + formatter.getFileExtension());
            }