There are several points where the server unzips a zip file provided by the user. Unzipping actions should verify the paths of the entries unzipped are the expected ones.