* techniques like "../../../etc/passwd".
     * </p>
     * <p>
     * Example usage:
     * </p>
     * <pre>
     * Path baseDir = Paths.get("/var/app/data");
     * Path userPath = Paths.get(userInput);
     * if (!FileUtil.isPathSafe(userPath, baseDir)) {
     *     throw new SecurityException("Path traversal attempt detected");
     * }
     * </pre>
     *

			ChecksumSHA256:    pInfo.ChecksumSHA256,
			ChecksumCRC64NVME: pInfo.ChecksumCRC64NVME,
		})
	}
	userMeta := map[string]string{
		xhttp.MinIOReplicationActualObjectSize: objInfo.UserDefined[ReservedMetadataPrefix+"actual-size"],
	}
	if isSSEC && objInfo.UserDefined[ReplicationSsecChecksumHeader] != "" {
		userMeta[ReplicationSsecChecksumHeader] = objInfo.UserDefined[ReplicationSsecChecksumHeader]
	}

func getCpObjMetadataFromHeader(ctx context.Context, r *http.Request, userMeta map[string]string) (map[string]string, error) {
	// Make a copy of the supplied metadata to avoid
	// to change the original one.
	defaultMeta := make(map[string]string, len(userMeta))
	for k, v := range userMeta {
		// skip tier metadata when copying metadata from source object
		switch k {