[TYPO3-dev] upload folder outside webroot

[Steffen Kamper]

Hi,

for a client i need uploadfolder outside webroot for security reasons.
After digging the source it worked perfect with TCA-setting
"uploadfolder" => "../files/",
I only had to modify t3lib_div::validPathStr to allow the .. in path.

I'm not happy with patching this file, but i don't see an easy way to do 
this without patching.
So my question is:
What is the reason to disallow .. in the path? I don't see a way to modify 
systemfiles.
Is there a legal way to reach my goal ?

thx, vg  Steffen