libarchive: sanitize filenames before extracting
updated for version 3.6.4