fix(files): bound YAML expansion and buffered reads on the file-serve path

fix(files): bound YAML expansion and buffered reads on the file-serve path #29599