Ensures that file extraction stays within the defined target path.
Functionality is controlled by the boolean 'restrict' which defaults to true.