Backport PR #2455: feat: Use Python 3.12+ tarfile data extraction filter

scikit-hep · May 30, 2024 · c0b9a1b · c0b9a1b
1 parent 71b87eb
commit c0b9a1b
Showing 1 changed file with 6 additions and 1 deletion.
diff --git a/src/pyhf/contrib/utils.py b/src/pyhf/contrib/utils.py
@@ -91,7 +91,12 @@ def download(archive_url, output_directory, force=False, compress=False):
                     with tarfile.open(
                         mode="r:*", fileobj=BytesIO(response.content)
                     ) as archive:
-                        archive.extractall(output_directory)
+                        # TODO: Simplify after pyhf is Python 3.12+ only
+                        # c.f. https://docs.python.org/3.12/library/tarfile.html#extraction-filters
+                        if hasattr(tarfile, "data_filter"):
+                            archive.extractall(output_directory, filter="data")
+                        else:
+                            archive.extractall(output_directory)
                 except tarfile.ReadError:
                     if not zipfile.is_zipfile(BytesIO(response.content)):
                         raise exceptions.InvalidArchive(