Upload: Prevent files outside of source folder

[jl-wynen]

When uploading, all files should go into a dataset's source folder. This needs to be guaranteed by disallowing any paths that would lead outside of the source folder, e.g., through going up a level: `remote_path=../not-in-source-folder/file'.