Outdated suggestion in your FAQs
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
lxml |
Triaged
|
Low
|
Unassigned |
Bug Description
In your FAQ question "How do I use lxml safely as a web-service endpoint?" you suggest to use the wrapper API from defusedxml for a safe lxml usage:
https:/
But this wrapper API is deprecated and raises a DeprecationWarning
```
DeprecationWarning: defusedxml.lxml is no longer supported and will be removed in a future release.
from defusedxml.lxml import fromstring
```
See also:
https:/
https:/
So some documentation how to replace the `defusedxml.
Yes, defusedxml is no longer maintained, but it took me about one minute to look up the current implementation there:
https:/ /github. com/tiran/ defusedxml/ blob/master/ defusedxml/ lxml.py# L112-L131
Doesn't look very sophisticated. Documentation PR welcome.