A new security check prevents path traversal attacks in shell write/create operations. Paths containing .. after a directory segment (which may follow a symlink outside the working directory) are now rejected.
Evidence
Path traversal validator (search for "Path contains '..' traversal") — U19 at line ~212741
Strings lifted out of the shipped bundle, so the claim above can be checked against them.
