Description
Users can provide local (i.e. file scheme) files in the list of files or jars to be added to sessions; this shouldn't be allowed (at least not by default), since it means people can abuse that to read files that only the Livy server has access to.