Unauthenticated file writes via path traversal

Path traversal in custom asset handling in iiDk-the-actual Console before 2.8.0 allows remote attackers to write outside the Gorilla Tag path. The handler accepts crafted combinations of backslashes and periods without confining the resulting file path to the intended directory. No authentication or user interaction is required, and the documented consequence is unauthorized file placement rather than disclosure or service interruption.