FIX: we fully trust the heasarc tar files

Author: bsipocz

astroquery/heasarc/core.py

@@ -677,7 +677,7 @@ def _download_heasarc(self, links, location='.'):
         if tarfile.is_tarfile(local_filepath):
             log.info(f'Untar {local_filepath} to {location} ...')
             tfile = tarfile.TarFile(local_filepath)
-            tfile.extractall(path=location)
+            tfile.extractall(path=location, filter="fully_trusted")
             tfile.close()
             os.remove(local_filepath)
         else: