fix: possible XML bombs and other exploits by replacing xml.etree.ElementTree with defusedxml.ElementTree
This commit is contained in:
		
							parent
							
								
									ceda81b968
								
							
						
					
					
						commit
						84a825a0b4
					
				|  | @ -8,7 +8,7 @@ if sys.version_info.major == 2:  # pragma: no cover | ||||||
| 
 | 
 | ||||||
| import json | import json | ||||||
| 
 | 
 | ||||||
| from xml.etree import ElementTree | from defusedxml import ElementTree | ||||||
| 
 | 
 | ||||||
| import re | import re | ||||||
| 
 | 
 | ||||||
|  |  | ||||||
		Loading…
	
		Reference in New Issue