Do not leak username to untrusted modules

[bajtos]

We must not leak the filesystem structure when the code is running inside a sandboxed environment. The Checker App files are usually in the user's home directory. The full path includes the username, which is sensitive information we should not leak to untrusted modules. The modules should have access only to the path relative to the project (module) root.

Current path:

file:///Users/bajtos/Library/Caches/app.filstation.desktop/sources/spark/main.js

Proposed path:

file:///ZINNIA/main.js
file://C:\ZINNIA\main.js

[bajtos]

Prior work:

• fix: do not leak username to untrusted modules #736
• fix: revert virtual module paths #750