fix(targets): guard writers against ancestor-symlink traversal on install

fix(targets): guard writers against ancestor-symlink traversal on install #2794