Normalize paths on files uploaded to prevent arbitrary file writes (#2905)

* normalize paths on files uploaded to prevent arbitrary file writes

* force normalize path in string parse

---------

Co-authored-by: timothycarambat <rambat1010@gmail.com>