title: Path Manipulation (security vulnerability)
body: <p>A Fortify security review informed us of some path manipulation vulnerabilities.  Most have been obvious and easy fixes, but I don't understand how to fix the following one.</p>
  
  <pre><code>string[] wsdlFiles = System.IO.Directory.GetFiles(wsdlPath, "*.wsdl");
  </code></pre>
  
  <p>"wsdlPath" is input from a textbox.  Is this something that just can't be fixed?  I can validate the path exists, etc. but how is that helping the vulnerability?</p>