denylist: ?format=car does not skip directly blocked CIDs

[lidel]

Checklist

• This is a bug report, not a question. Ask questions on discuss.ipfs.io.
• I have searched on the issue tracker for my bug.
• I am running the latest kubo version or have an issue updating.

Installation method

built from source

Version

0.26

Config

default

Description

?format=car does not skip directly blocked CIDs.

Repro in commented block of #10360:

kubo/test/cli/content_blocking_test.go

Lines 118 to 131 in 92acc24

	/* TODO: this was already broken in 0.26, but we should fix it
	t.Run("Gateway returns CAR without directly blocked CID", func(t *testing.T) {
	allowedDirWithDirectlyBlockedCID := node.IPFS("add", "--raw-leaves", "-Q", "-rw", filepath.Join(h.Dir, "directly-blocked-file.txt")).Stdout.Trimmed()
	resp := client.Get("/ipfs/" + allowedDirWithDirectlyBlockedCID + "?format=car")
	assert.Equal(t, http.StatusOK, resp.StatusCode)
	bs, err := carstore.NewReadOnly(strings.NewReader(resp.Body), nil)
	assert.NoError(t, err)
	has, err := bs.Has(context.Background(), cid.MustParse(blockedCID))
	assert.NoError(t, err)
	assert.False(t, has, "Returned CAR should not include blockedCID")
	})
	*/