- Add validateOutputPath() to ensure screenshot, pdf, and responsive
commands only write to /tmp or current working directory
- Add validateReadPath() to prevent eval command from reading
files outside allowed directories or using path traversal (..)
- Validates both absolute paths and relative paths with .. sequences
Security impact: Prevents arbitrary file write (screenshot/pdf) and
arbitrary file read (eval) attacks via path traversal.
Fixes: #13
Jah-yee
Garry Tan
morluto