ajenti / ajenti

Insecure lxml import detected BAN-B410
Security
Minor
6 months ago4 years old
Using fromstring to parse untrusted XML data is known to be vulnerable to XML attacks. Replace fromstring with the equivalent defusedxml package.
  7import requests
  8import shutil
  9import subprocess
 10from lxml.html import fromstring 11from concurrent import futures
 12
 13import aj