A tester demonstrates directory traversal using a test marker file outside the permitted document root. Which remediation most directly addresses the root cause?

1. Constrain file access to an approved root and validate canonicalized paths
2. Add more file extensions to the download menu
3. Increase the response compression ratio
4. Hide the application's title text