Redmine

Redmine reads files with IO.read and IO.binread in a few places.

IO.read and its variants treat an argument beginning with a pipe character as a command to run, while File.read always treats it as a file name. The current call sites build their paths internally, so this is not a vulnerability. However, File.read makes the intent clearer and avoids the risk if these paths ever become user-controlled.

The attached patch replaces IO.read and IO.binread with File.read and File.binread.