Java: add File.getName as a path injection sanitizer

[jcogs33]

Adds java.io.File.getName as a path injection sanitizer.

Pull Request checklist

All query authors

• A change note is added if necessary. See the documentation in this repository.
• QL tests are added if necessary. See Testing custom queries in the GitHub documentation.

Internal query authors only

• Changes are validated at scale (internal access required).

[owen-mc]

Looks good to me. Just needs a change note. You could use MRVA to find instances of the sanitizer to check that it's doing the right thing, given that it probably won't have that much effect on actual results.

[jcogs33]

Thanks for the review!

Just needs a change note. You could use MRVA to find instances of the sanitizer to check that it's doing the right thing, given that it probably won't have that much effect on actual results.

Yes, it's still in draft due to the change note and MRVA/DCA review. 🙂

[jcogs33]

MRVA/DCA alert changes look reasonable.