Derived from the flake8-bandit linter.
This rule is unstable and in preview. The
--preview flag is required for use.
What it does#
Checks for imports of the
Why is this bad?#
Using various methods from these modules to parse untrusted XML data is
known to be vulnerable to XML attacks. Replace vulnerable imports with the
defusedxml package, or make sure
called before parsing XML data.