chore(iast): check secure marks for path traversal

[avara1986]

Checklist

• PR author has checked that all the criteria below are met
• The PR description includes an overview of the change
• The PR description articulates the motivation for the change
• The change includes tests OR the PR description describes a testing strategy
• The PR description notes risks associated with the change, if any
• Newly-added code is easy to change
• The change follows the library release note guidelines
• The change includes or references documentation updates if necessary
• Backport labels are set (if applicable)

Reviewer Checklist

• Reviewer has checked that all the criteria below are met
• Title is accurate
• All changes are related to the pull request's stated goal
• Avoids breaking API changes
• Testing strategy adequately addresses listed risks
• Newly-added code is easy to change
• Release note makes sense to a user of the library
• If necessary, author has acknowledged and discussed the performance implications of this PR as reported in the benchmarks PR comment
• Backport labels are set in a manner that is consistent with the release branch maintenance policy

[github-actions]

CODEOWNERS have been resolved as:

tests/appsec/integrations/fixtures/patch_file_paths.py                  @DataDog/asm-python
tests/appsec/integrations/flask_tests/test_sanitizers.py                @DataDog/asm-python
ddtrace/appsec/_iast/_patch_modules.py                                  @DataDog/asm-python
tests/appsec/iast/test_iast_dbs.py                                      @DataDog/asm-python

[github-actions]

Bootstrap import analysis

Comparison of import times between this PR and base.

Summary

The average import time from this PR is: 233 ± 3 ms.

The average import time from base is: 237 ± 2 ms.

The import time difference between this PR and base is: -3.9 ± 0.1 ms.

Import time breakdown

The following import paths have shrunk:

ddtrace.auto 2.088 ms (0.90%)

ddtrace.bootstrap.sitecustomize 1.413 ms (0.61%)

ddtrace.bootstrap.preload 1.413 ms (0.61%)

ddtrace.internal.products 1.413 ms (0.61%)

ddtrace.internal.remoteconfig.client 0.648 ms (0.28%)

ddtrace 0.675 ms (0.29%)

[pr-commenter]

Benchmarks

Benchmark execution time: 2025-04-23 14:37:59

Comparing candidate commit 2737f46 in PR branch avara1986/APPSEC-57370_path_traversal_secure_mark with baseline commit 6d33c22 in branch main.

Found 0 performance improvements and 2 performance regressions! Performance is the same for 498 metrics, 8 unstable metrics.

scenario:iast_aspects-ospathdirname_aspect

• 🟥 execution_time [+803.470ns; +912.875ns] or [+17.496%; +19.878%]

scenario:iast_aspects-ospathnormcase_aspect

• 🟥 execution_time [+347.129ns; +420.792ns] or [+10.053%; +12.186%]