=== Message

Refactor this code to not construct the extracted file/dir from tainted, user-controlled data.