Block local file paths at Campaign server boundaries

src/govoplan_campaign/backend/dev/mock_campaign.py

@@ -14,6 +14,7 @@ from govoplan_campaign.backend.persistence.campaigns import load_campaign_config
 from govoplan_campaign.backend.messages.builder import build_campaign_messages
 from govoplan_campaign.backend.messages.models import MessageAddress, MessageDraft, MessageValidationStatus
 from govoplan_campaign.backend.integrations import files_integration, mail_integration
+from govoplan_campaign.backend.path_security import assert_server_safe_campaign_paths
 
 
 class MockCampaignSendError(RuntimeError):
@@ -334,6 +335,10 @@ def run_mock_campaign_send(
         mailbox.clear_records()
 
     files = files_integration()
+    assert_server_safe_campaign_paths(
+        version.raw_json if isinstance(version.raw_json, dict) else {},
+        managed_files_available=files.available,
+    )
     with files.prepared_campaign_snapshot(
         session,
         tenant_id=tenant_id,