fix(security): zip slip

[hshpy]

No description provided.

[Copilot]

Pull Request Overview

This PR implements zip slip security protection by preventing path traversal attacks during archive decompression. The changes add validation to ensure extracted files cannot escape the intended output directory through malicious path names containing "../" sequences.

• Replaces standard library path with filepath for proper OS-specific path handling
• Adds path validation checks in decompression functions to prevent zip slip attacks
• Introduces utility function usage for path cleaning and normalization

---

_{Tip: Customize your code reviews with copilot-instructions.md. Create the file or learn how to get started.}

[ILoveScratch2]

不只是ZIP，其他格式也要修
比如：
archives_gzip.tar.gz

[hshpy]

不只是ZIP，其他格式也要修 比如： archives_gzip.tar.gz

已添加，其它格式待测试