title: Does this replaceAll "sanitize" a path?
body: <p>Written in Java.
  I dont understand why this would be a security issue
  if fName = ..project/blah/blah.exe</p>
  
  <p>would this possibly open a file that might be malicious on a different directory that has the same name?</p>
  
  <pre><code>String sFileName = request.getParameter(“fName”);
  sFileName = sFileName.replaceAll("/", “\\");
  sFileName = sFileName.replaceAll(“..\\", ""); 
  </code></pre>