Extraction to paths outside output folder should fail by default

[DanRStevens]

An archive with absolute paths, or relative paths with ".." to escape the output folder could wreak havoc on a user's system during extraction. This should be disabled by default.

Such an archive could be constructed by a malicious user using a third party tool. As such, the check would need to be done during extraction to be effective, and not simply during packing.

Consider:
/autoexec.bat
/config.sys
/Windows/System32/cmd.exe
/etc/passwd (Linux)
../../../../Windows/System32/cmd.exe

If extraction of such files is to be allowed, it should require explicit use of a command line switch.