    private static String encodePathToPercents(Bytes value) {
        if (!value.hasEncodedBytes()) {
            // Deprecated, but it fits perfect for our use case.
            // noinspection deprecation
            return new String(value.data, 0, 0, value.length);
        }

        // Slow path: some percent-encoded chars.
        return slowEncodePathToPercents(value);
    }
The software uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the software does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.