Fix code scanning alert no. 2: Uncontrolled data used in path expression

Fix code scanning alert no. 2: Uncontrolled data used in path expression #10