Prevent writing outside allowed directories list from a config payload with actions

Prevent writing outside allowed directories list from a config payload with actions #3605