Quoth Galos, David: > Thanks in large part to your information about how you invoke tar, I > believe I have come up with a decent solution. I also was able to > find the structified version of tar I had worked on in the past.
I'd be inclined to check for and filter out leading .. and / characters, to avoid tarballs doing unexpectedly evil things.
