[eclipse-sig] [Bug 1945712] CVE-2021-28164 jetty: Ambiguous paths can access WEB-INF