The intended policy requires that only valid pathnames be processed.
A Symbolic Link Following Vulnerability occurs when the product generates a
pathname that is associated with a symbolic link resource without ensuring that
the link resolves to an identifier for a resource within the container.