Fix file disclosure via hidden symlinks using the project import (9.3)

See merge request !2164