CVE-2022-23082: Path traversal in CureKit

The vulnerability description explicitly names isFileOutsideDir as the failing function. The commit diff shows this function was modified to replace a string-based startsWith check with a Path-based comparison, confirming the original implementation was insufficient. The added test case demonstrates a scenario where the old logic would fail (checking '/usr/foo/../foo-bar/bar' against '/usr/foo'). The string-based comparison in the original code couldn't distinguish between directory hierarchy and string prefixes, making it vulnerable to path traversal.