bz-996397:Security review: org.guvnor.m2repo.backend.server.FileDownloadServlet vulnerable to path traversal