Fix symlink path-traversal escape in UntarNested