When extracting tarballs we should check for ".." in the paths prior to extraction.

A malicious customer could potentially provide a file/path that overwrites a file in /app such as a file that prints out critical information to a /endpoint.

CVE-2007-4559 python:
https://issues.redhat.com/browse/AA-1433
https://bugzilla.redhat.com/show_bug.cgi?id=263261