tenant did not do legality verification

Issue Description

Type: bug report

Describe what happened (or what feature you want)

tenant did not do legality verification

Describe what you expected to happen

tenant did not do legality verification

How to reproduce it (as minimally and precisely as possible)

1. tenant can input ../../xx
2. There is an unauthorized risk

Tell us your environment

all version

Anything else we need to know?

na