Who cares about a possible directory traversal when the entire purpose of this is to run arbitrary code?<p>It doesn&#x27;t appear to attempt to sandbox the uploaded code at all. This is obviously not meant to be exposed to untrusted parties.