[PR] tar.py: Always use extraction filter [buildstream]

["juergbi (via GitHub)" <gi...@apache.org>]

juergbi opened a new pull request, #2192:
URL: https://github.com/apache/buildstream/pull/2192

   Extraction in the tar plugin currently has two code paths. Using extraction filters on Python 3.12+ and relying on custom safety checks on older Python versions. This PR switches to using an extraction filter on all supported Python versions by importing a copy of Python's `tarfile.py` for use on older Python versions. This allows replacing the custom safety checks with a combination of upstream Python filters that are more widely tested.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: commits-unsubscribe@buildstream.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org

Re: [PR] tar.py: Always use extraction filter [buildstream]

["juergbi (via GitHub)" <gi...@apache.org>]

juergbi merged PR #2192:
URL: https://github.com/apache/buildstream/pull/2192


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: commits-unsubscribe@buildstream.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org