bandit/examples/xml_expatbuilder.py
Rob Fletcher 18285c1bb9 Add XML vulnerability checking
This adds an XML plug-in based on the documentation an defusedxml.

Change-Id: Id775cd0f3d45fd2e9dac1c5bca5c36e0b5618066
2015-04-24 09:58:26 -07:00

11 lines
344 B
Python

import xml.dom.expatbuilder as bad
import defusedxml.expatbuilder as good
bad.parse('filethatdoesntexist.xml')
good.parse('filethatdoesntexist.xml')
xmlString = "<note>\n<to>Tove</to>\n<from>Jani</from>\n<heading>Reminder</heading>\n<body>Don't forget me this weekend!</body>\n</note>"
bad.parseString(xmlString)
good.parseString(xmlString)