Merge "validate_path should only reject sudirs named ".."" into main