Security Fixes - Restrict the Actions & Creation to require valid content

[UberMeatShield]

• Don't let a container update the Path unless it is under the hosted directory SubPath checks
• Make sure Update and Create Container have path checking.
• Add a read only config flag that can be set in the config that PREVENTS all edits.
• Validate that download on a NoFile item just returns the JSON.

[UberMeatShield]

Read only flag is done.

[UberMeatShield]

Done