Add support for tarfile filters

Author: sivel

galaxy_importer/collection.py

@@ -164,6 +164,9 @@ def _import_collection(file, filename, file_url, logger, cfg):
 
 def _extract_archive(fileobj, extract_dir):
     fileobj.seek(0)
+    kwargs = {}
+    if hasattr(tarfile, "data_filter"):
+        kwargs["filter"] = "data"
     with tarfile.open(fileobj=fileobj, mode="r") as tf:
         for item in tf.getmembers():
             if item.name.startswith("/") or "../" in item.name:
@@ -175,4 +178,4 @@ def _extract_archive(fileobj, extract_dir):
                 )
                 if not link_target.startswith(os.path.abspath(extract_dir)):
                     raise exc.ImporterError("Invalid link target detected.")
-        tf.extractall(extract_dir)
+        tf.extractall(extract_dir, **kwargs)