fix: possible XML bombs and other exploits by replacing xml.etree.ElementTree with defusedxml.ElementTree

2024-11-15 20:08:01 -06:00 · 2024-11-15 20:08:01 -06:00 · 84a825a0b4
parent ceda81b968
commit 84a825a0b4
1 changed files with 1 additions and 1 deletions
--- a/youtube_transcript_api/_transcripts.py
+++ b/youtube_transcript_api/_transcripts.py
@ -8,7 +8,7 @@ if sys.version_info.major == 2:  # pragma: no cover

 import json

-from xml.etree import ElementTree
+from defusedxml import ElementTree

 import re