Fix Path Traversal vulnerability via converterservice param - filetype. Add filetype allowlist via regex