Fix vulnerable.

app/controllers/admin/patchfiles_controller.rb

@@ -112,8 +112,8 @@ class Admin::PatchfilesController < OrbitAdminController
         @file = params["fontfile"]["font_file"] if params["fontfile"]["font_file"] != ""
         @file_path = Rails.root.to_s + '/app/assets/fonts'
         
-        if @file.nil? != true
-          @file_name = @file.original_filename
+        if !@file.nil?
+          @file_name = File.basename(@file.original_filename)
           @file_content = @file.read
           @file_content.force_encoding('UTF-8')
           File.open("#{@file_path}/#{@file_name}","w+") do |f|