Local file read in image editor

Summary

Filepaths were able to traverse up outside of their intended directory when using the /edit/process API endpoint.

Insufficient imageid filtration in image editor allowed an attacker to read arbitrary files. An attacker could read files by setting file path in imageid GET param in /edit/process API endpoint - http://imgur.com/edit/process?imageid=../../../../../../../../../../etc/passwd