Security: protect from path traverse attack(zip slip) and symlink attack
Signed-off-by: Hiroshi Miura <miurahr@linux.com>