[错误] 对 CVE-2026-73034 的修复不完整: 未验证的 `user-id` 路径组件在 /api/v1/examples/use 中存活

user_id = user_token.user_id or "default"                       # from the user-id header, unvalidated
...
upload_dir = os.path.join(base_dir, "python_uploads", user_id)  # user_id is a path component
os.makedirs(upload_dir, exist_ok=True)                          # creates the escaped directory
target_name = _validate_example_filename(example["name"])       # validates the NAME only
target_path = os.path.join(upload_dir, target_name)
shutil.copy2(source_path, target_path)                          # writes into the escaped directory