We test [symlinks](https://github.com/Substra/substra/blob/main/tests/sdk/test_archive.py#L69) but we don't test [path traversal](https://github.com/Substra/substra/blob/main/substra/sdk/archive/tarsafe.py#L51) for tar files, we should add a test
