Avoid tar directory traversal on sdist extract to fix CVE-2007-4559 (#90)
Avoid tar directory traversal on sdist extract to fix CVE-2007-4559 (#90)

* Avoid tar directory traversal on sdist extract to fix CVE-2007-4559

* Move constant root path resolution in safe_extract_tar outside loop
regebro/pyroma