fix(security): tar vulnerability

[jsjoeio]

This PR is based off of #4071 and fixes a tar vulnerability.

[codecov]

Codecov Report

Merging #4085 (b4dff04) into jsjoeio-fix-revert-docs (5c47c3e) will not change coverage.
The diff coverage is n/a.

❗ Current head b4dff04 differs from pull request most recent head a24e8f5. Consider uploading reports for the commit a24e8f5 to get more accurate results

@@                   Coverage Diff                    @@
##           jsjoeio-fix-revert-docs    #4085   +/-   ##
========================================================
  Coverage                    64.12%   64.12%           
========================================================
  Files                           36       36           
  Lines                         1873     1873           
  Branches                       379      379           
========================================================
  Hits                          1201     1201           
  Misses                         571      571           
  Partials                       101      101           

---

Continue to review full report at Codecov.

Legend - Click here to learn more
Δ = absolute <relative> (impact), ø = not affected, ? = missing data
Powered by Codecov. Last update 5c47c3e...a24e8f5. Read the comment docs.

[github-actions]

✨ Coder.com for PR #4085 deployed! It will be updated on every commit.

• Host: https://codercom-jezpd1mgw-codercom.vercel.app/docs/code-server
• Last deploy status: success
• Commit: b4dff04
• Workflow status: https://github.com/cdr/code-server/actions/runs/1191806962

[GirlBossRush]

@jsjoeio I believe this may be outdated as we no longer need tar for extensions in an upcoming fork clean up PR

[jsjoeio]

@jsjoeio I believe this may be outdated as we no longer need tar for extensions in an upcoming fork clean up PR

Sweet! I wonder when that will land though? If we have PRs coming in before that, should we fix this sooner?

(though looks like something is still failing)