[Bug]: incorrect access control

### Installation Method | 安装方法与平台

Pip Install (I ignored requirements.txt)

### Version | 版本

Latest | 最新版

### OS | 操作系统

Linux

### Describe the bug | 简述

A vulnerability in gpt_academic_3.90 allows unauthenticated or unauthorized attackers to access any file ending with the .docx extension located in any directory, including the root directory. The application fails to enforce appropriate access control policies for file access, relying solely on a file filter condition matching .docx. This oversight permits attackers to retrieve sensitive .docx files without proper authorization, leading to potential information disclosure.

### Screen Shot | 有帮助的截图

analysis_world_documentation; https://github.com/binary-husky/gpt_academic/blob/98e5cb7b7750b89025103d0c5865f29d6457b83a/crazy_functions/%E6%80%BB%E7%BB%93word%E6%96%87%E6%A1%A3.py#L105

### Terminal Traceback & Material to Help Reproduce Bugs | 终端traceback（如有） + 帮助我们复现的测试材料样本（如有）

_No response_

Start at crazy_functions/总结word文档.py around line 105, where the issue identifies the .docx file access path. Trace how an unauthenticated request reaches that code and reproduce access to a .docx file outside the intended scope. Done means unauthorized users can no longer retrieve sensitive .docx files; add or run a regression test if the existing test structure supports it.

Written by the indexing model from the issue text.