Giters

18F / omb-eregs

A tool to find, read, and maintain White House Office of Management and Budget (OMB) policy requirements

Home Page:https://policy-beta.cio.gov/

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

Consider adding defusedxml to harden XML PUT endpoint

toolness opened this issue · comments

commented

We added XML (Akoma Ntoso) support for our REST PUT endpoint in #873 but there's some confusion over whether we actually need defusedxml or not, to guard against certain types of attacks. See e.g. #868 (comment) for more details.