Go's filepath.Clean does not prevent path traversal | Hacker News Reader