This update avoids a malicious repository writing to files outside the local storage root.