Add Python rule on using tarfile expanding untrusted members

[ericwb]

Is your feature request related to a problem? Please describe.
Care must be taken using tarfile to prevent expanding a tar with untrusted members.

Describe the solution you'd like
The tarfile functions extractall() and extract() warn about never extracting archives from untrusted sources without prior inspection. Set filter='data' to prevent the most dangerous security issues, and read the Extraction filters section for details.

Describe alternatives you've considered
n/a

Additional context

• https://docs.python.org/3.12/library/tarfile.html#tarfile-extraction-filter
• https://docs.python.org/3.12/library/tarfile.html#tarfile.TarFile.extractall

Love this idea? Give it a 👍. We prioritize fulfilling features with the most 👍.