Martin Panter added the comment: Today I discovered that Christian’s defusedxml project already does the same sort of thing. The difference is he calls the parameter forbid_entities. So I have updated my patch and changed the name from reject_entities to forbid_entities for compatibility.
---------- versions: +Python 3.6 -Python 3.5 Added file: http://bugs.python.org/file43185/etree-entities.v2.patch _______________________________________ Python tracker <rep...@bugs.python.org> <http://bugs.python.org/issue24238> _______________________________________ _______________________________________________ Python-bugs-list mailing list Unsubscribe: https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com
