bz-996397:Security review: org.guvnor.m2repo.backend.server.FileDownloadServlet vulnerable to path traversal

(cherry picked from commit 524c032e8dd79fc62f32aa87913505218e77d994)