package: busybox: Force PATH_TRAVERSAL_PROTECTION off

Mangling paths in tarballs when extracting breaks 'ipkg install' unless
it is called from / so disable it. The whole feature is nonsense to
begin with: People who extract unknown tarballs as root without at least
checking where data will be extracted to will certainly find an
alternative way to shoot their foot.

Signed-off-by: Phil Sutter <phil@nwl.cc>

package/busybox/config/archival/Config.in

@@ -455,8 +455,8 @@ config BUSYBOX_FEATURE_LZMA_FAST
 	a 1K bigger binary.
 
 config BUSYBOX_FEATURE_PATH_TRAVERSAL_PROTECTION
-	bool "Prevent extraction of filenames with /../ path component"
-	default y
+	bool
+	default n
 	help
 	busybox tar and unzip remove "PREFIX/../" (if it exists)
 	from extracted names.
@@ -464,4 +464,6 @@ config BUSYBOX_FEATURE_PATH_TRAVERSAL_PROTECTION
 	such as cpio, ar, rpm.
 	GNU cpio 2.15 has NO such sanity check.
 
+	Keep this disabled, it breaks ipkg.
+
 endmenu