-
Notifications
You must be signed in to change notification settings - Fork 0
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
👽 Replace deprecated defusedxml.lxml module usage #52
👽 Replace deprecated defusedxml.lxml module usage #52
Conversation
3ed4a9b
to
5de1385
Compare
Codecov ReportAll modified and coverable lines are covered by tests ✅
Additional details and impacted files@@ Coverage Diff @@
## master #52 +/- ##
=======================================
Coverage 96.01% 96.01%
=======================================
Files 71 72 +1
Lines 3212 3215 +3
=======================================
+ Hits 3084 3087 +3
Misses 128 128 ☔ View full report in Codecov by Sentry. |
@CharString I've picked you for review since I'm not 100% certain yet that this doesn't open up any security holes 🤔 |
5de1385
to
d61c56a
Compare
In 2024 this is no longer essential, using lxml by itself should be sufficient. See also the discussion on python.org: https://discuss.python.org/t/status-of-defusedxml-and-recommendation-in-docs/34762/3
cd01bb3
to
dbc8fba
Compare
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Forgot to set the lower bound on the lxml dependency, looks fine otherwise.
This repeats the lower bound from maykin-python3-saml but makes it explicit.
This should mostly be a no-op except that it effectively purges defusedxml.lxml usage.
Related to open-formulieren/open-forms#1052