Fix code scanning alert no. 27591: Arbitrary file write during tarfile extraction

Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>

Author: justinchuby

onnxruntime/python/tools/tensorrt/perf/setup_scripts/setup_onnx_zoo.py

@@ -18,6 +18,9 @@ def extract_and_get_files(file_name):
     model_folder = file_name.replace(".tar.gz", "") + "/"
     create_model_folder(model_folder)
     with tarfile.open(file_name) as model_tar:
+        for member in model_tar.getmembers():
+            if os.path.isabs(member.name) or ".." in member.name:
+                raise ValueError(f"Illegal tar archive entry: {member.name}")
         model_tar.extractall(model_folder)
         file_list = model_tar.getnames()
         file_list.sort()