Potential file inclusing attack via reading file

[tolgaOzen]

Find more live information in Aikido here: https://app.aikido.dev/queue?sidebarIssue=4226132&groupId=6798&sidebarIssueTask=109780&sidebarTab=tasks

==== Scope ====
This task includes issues in the following code repository:

• permify: pkg/schema/loader.go

==== TLDR ====
If an attacker can control the input leading into the ReadFile function, they might be able to read sensitive files and launch further attacks with that information.

==== How to fix ====
Ignore this issue only after you've whitelisted or sanitized the input going into this function.