feat(xml-parsing): 🔐 enhance security with defusedxml and bandit rules
fix bandit rule B318: (xml-attribute-parsing) defusedxml package should be used to parse untrusted XML data fix bandit rule B314: (xml-entity-expansion) XML entity expansion should be disabled fix bandit rule B413: (xml-etree-parse) XML parsing library should be secure fix bandit rule B412: (xml-lib-exploits) XML libraries should be vetted for defusedxml or lxml.vulns fix bandit rule B410: (xml-minidom-xxe) XML minidom can be vulnerable to XML eXternal Entity attacks Signed-off-by: Onuralp SEZER <thunderbirdtr@gmail.com>
This commit is contained in:
5 files changed
+99
-129
No files matched your search
@@ -25,3 +25,4 @@ tomli==2.0.1
|
||||
tqdm==4.62.3
|
||||
typing_extensions==4.8.0
|
||||
urllib3==1.26.18
|
||||
defusedxml == 0.7.1
|
||||
Reference in new issue
Block a user