Deal with the fact that Python is idiotic with regard to zip files and path traversal

Because Python3's stdlib think that it's ok in 2018 to be vulnerable to path traversal upon zip extraction, we should take care of this.

added good first issue label

Apparently, this is now fixed, although the code does look a bit weird.

closed

changed milestone to %0.1.2 - Duck