def _repair(self):
self.files = list(filter(self._safe_path, self.files))<EOL>
Replace self.files with only safe paths

Because some owners of FileList manipulate the underlying
``files`` attribute directly, this method must be called to
repair those paths.