add sanitize two dots in filepath for file uploading

Author: tolanych

Diff for: core/model/modx/sources/modfilemediasource.class.php

@@ -873,7 +873,7 @@ public function uploadObjectsToContainer($container,array $objects = array()) {
             }
 
             $newPath = $this->fileHandler->sanitizePath($file['name']);
-            $newPath = $directory->getPath().$newPath;
+            $newPath = ltrim(strip_tags(preg_replace('/[\.]{2,}/', '', htmlspecialchars($directory->getPath().$newPath))));
 
             if (!move_uploaded_file($file['tmp_name'],$newPath)) {
                 $this->addError('path',$this->xpdo->lexicon('file_err_upload'));