Filesystem sandbox escape via late reserved-character filtering

Path traversal in CraftOS-PC 2 before 2.8.3 allows local users to read or write files outside the emulator sandbox on Windows. The fix shows that fixpath and fixpath_multiple filtered Windows-reserved characters only after checking path components, so inputs such as ..| evaded the parent-directory check before Windows discarded the suffix. Exploitation requires user interaction in a Windows session and exposes host files with the emulator process privileges.