Fix arbitrary file write vulnerability in _wget_download function

[m0kr4n3]

PR types

Bug fixes

PR changes

Others

Description

Add 2 checks:

• checks if the fullname is empty.
• ensures it's not a path.

[CLAassistant]

All committers have signed the CLA.

[CLAassistant]

Thank you for your submission! We really appreciate it. Like many open source projects, we ask that you sign our Contributor License Agreement before we can accept your contribution.
_{You have signed the CLA already but the status is still pending? Let us recheck it.}

[VigiZhang]

61356

[VigiZhang]

We prefer to remove this function from the utils package. 61356