Restrict checkpoint name to prevent directory traversal Upstream-commit: ab397c95e6b872dc7575c693ea4dbd0041ef547b Component: engine