Policies for tarfile.extractall, a.k.a. fixing CVE-2007-4559

[barry-scott]

@barneygale

Q: Could we implement the policies described above in subclasses of TarInfo? It might be easier to retrofit. E.g.:

I think this a case that compositions is better the inheritance.