Go's filepath.Clean does not prevent path traversal | Dark Hacker News