Fabien GELUS

Thanks for your initiative. We created a [tarsafe](https://github.com/Substra/substra/blob/main/substra/sdk/archive/tarsafe.py) module, which I think already does the needed checks, can someone confirm?

Actually we test [symlinks](https://github.com/Substra/substra/blob/main/tests/sdk/test_archive.py#L69) but we don't test [path traversal](https://github.com/Substra/substra/blob/main/substra/sdk/archive/tarsafe.py#L51) for tar files, we should add a test

https://github.com/Substra/substra/issues/308

Still got the same issue `BdbQuit` with Click 7.1.2, none of the workarounds work for me

Solution 1: `pip install attrs` But the best would be to upgrade myst-parser to the latest version, and apply the breaking changes: https://myst-parser.readthedocs.io/en/latest/develop/_changelog.html#markdown-link-resolution-improvements