fix: 修复 StaticResourceServer 路径操纵漏洞

core/core-backend/src/main/java/io/dataease/visualization/server/StaticResourceServer.java

@@ -48,6 +48,7 @@ public class StaticResourceServer implements StaticResourceApi {
             if (!isImage(file)) {
                 DEException.throwException("Multipart file must be image");
             }
+            FileUtils.validateUploadFilename(fileId);
             String originName = file.getOriginalFilename();
             FileUtils.validateUploadFilename(originName);
             String newFileName = fileId + originName.substring(originName.lastIndexOf("."), originName.length());