LukeMurphey / splunk-syndication-input

A Splunk app for reading syndication feeds (RSS, ATOM, RDF)
GNU General Public License v3.0
7 stars 8 forks source link

Feedparser parsing of untrusted XML is not ideal #12

Open LukeMurphey opened 1 year ago

LukeMurphey commented 1 year ago

A better alternative would be to use defusedxml

See https://pypi.org/project/defusedxml/

It looks like it might have issues though: https://github.com/kurtmckee/feedparser/issues/296

LukeMurphey commented 1 year ago

https://github.com/lemon24/reader/issues/212