reject encoded path separators that bypass route-level middleware ( 3009)

reject encoded path separators that bypass route-level middleware ( 3009): a task in repo2rlenv-commit-runtime-v2 (Harbor dataset). Title: Encoded path separators ( %2F , %2E ) in static file requests bypass route-level middleware