Boolean result = invokeIsValidUploadPath(maliciousFile, baseDir);
        assertFalse("Path traversal with ../ should be blocked", result);
    }

    @Test
    public void test_isValidUploadPath_pathTraversal_encoded() throws Exception {
        // Test path traversal that would be decoded
        File baseDir = new File(tempDir.toFile(), "images");
        baseDir.mkdirs();