Hacker News
new
|
past
|
comments
|
ask
|
show
|
jobs
|
submit
login
masklinn
on Sept 12, 2024
|
parent
|
context
|
favorite
| on:
Defusedxml – defusing XML bombs and other exploits
If you’re trying to use it for lxml then yes, it was only ever experimental and has been deprecated (it also failed to define some interfaces correctly causing issues).
If you’re using it over the stdlib then no.
Guidelines
|
FAQ
|
Lists
|
API
|
Security
|
Legal
|
Apply to YC
|
Contact
Search:
If you’re using it over the stdlib then no.