3 ms·
But how do you know to use defusedxml instead of the regular one? I've never even heard of it.
by fryguy 12y ago
But how do you know to use defusedxml instead of the regular one? I've never even heard of it.
- dalke 12y agoThe base problem is that XML is not secure by default. Every solution requires either figuring out the problems yourself (which is impossible, given the number of problems that exist), or learning about it from elsewhere. No matter what, there will be people asking the same question you did. I found out about defusedxml because I read planet.python.org where http://blog.python.org/2013/02/announcing-defusedxml-fixes-for-xml.html http://blog.python.org/2013/02/announcing-defusedxml-fixes-f... came up, and because I had enough general understanding of the security problems with XML to recognize why it was created.