Use file name whitelist to prevent RCE#4866

gaearon merged 4 commits intofacebook:nextfacebook/create-react-app:nextfrom

acdlite:file-name-whitelistacdlite/create-react-app:file-name-whitelistCopy head branch name to clipboard