    def test_value_from_datadict(self, client, upload_file):
        print(storage.location)
        with open(upload_file) as f:
            uploaded_file = storage.save("test.jpg", f)
        response = client.post(
            reverse("upload"),
            {
                "file": json.dumps([uploaded_file]),
                "s3file": '["file"]',
            },
        )

        assert response.status_code == 201
The software uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the software does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.