Sanitize path api params

- fix path traversal complains by CodeQL

utils/utils.go

@@ -4,6 +4,7 @@ package utils
 import (
 	"fmt"
 	"os"
+	"strings"
 
 	"golang.org/x/sys/unix"
 )
@@ -22,3 +23,10 @@ func DirIsAccessible(filename string) error {
 	}
 	return nil
 }
+
+// Remove leading '/', remove '..'
+func PathSanitize(path string) (result string) {
+	result = strings.Replace(path, "..", "", -1)
+	result = strings.TrimLeft(result, "/")
+	return
+}