fix(handles): add src_name validation in FsBatchRename

- Validate source names with checkRelativePath before batch renames
- Reject invalid source paths with a forbidden response

Co-authored-by: Codex <267193182+codex@users.noreply.github.com>
Signed-off-by: jyxjjj <16695261+jyxjjj@users.noreply.github.com>

Author: jyxjjj

server/handles/fsbatch.go

@@ -188,6 +188,11 @@ func FsBatchRename(c *gin.Context) {
 		if renameObject.SrcName == "" || renameObject.NewName == "" {
 			continue
 		}
+		err = checkRelativePath(renameObject.SrcName)
+		if err != nil {
+			common.ErrorResp(c, err, 403)
+			return
+		}
 		err = checkRelativePath(renameObject.NewName)
 		if err != nil {
 			common.ErrorResp(c, err, 403)