haskell/hackage-server — pull request #190 by ian-ross (2014-02-16 09:12:29+00:00)
Title: Sanitise tarballs in mirror client

Within mirror client, clean items outside main package directory from
tarballs before attempting to upload them. Some package tarballs have
extraneous stuff in them (pax_global_header files, MacOS hidden files,
etc.) that causes them to fail the "tarbomb" test in the server.