refs +11378 santize the preview path

plugins/c9.preview/preview.js

@@ -21,6 +21,8 @@ define(function(require, exports, module) {
         var userContent = imports["user-content.redirect"];
         var getVfsServers = imports["vfs.serverlist"].getServers;
         
+        var Path = require("path");
+        
         var frontdoor = require("frontdoor");
         var error = require("http-error");
         var requestTimeout = require("c9/request_timeout");
@@ -50,6 +52,10 @@ define(function(require, exports, module) {
             }
         }, [
             requestTimeout(15*60*1000),
+            function sanitzePreviewPath(req,res,next){
+                req.params.path = Path.normalize(decodeURIComponent(req.params.path));
+                next();
+            },
             handler.getProjectSession(),
             handler.getRole(db),
             handler.getProxyUrl(function() {