fix: confine event hook script paths to the project tree (#4133)

fix: confine event hook script paths to the project tree (#4133) #7382