Skip to content

use-defusedxml codemod should handle usage of xmlrpc #582

@drdavella

Description

@drdavella

Using xmlrpc is potentially unsafe and defusedxml.xmlrpc should be used instead.

We should enhance the existing use-defusedxml codemod to replace calls to xmlrpc with defusedxml.xmlrpc.

See this Semgrep rule for an example of the kinds of patterns we should detect and replace: https://semgrep.dev/r?q=python.lang.security.use-defused-xmlrpc.use-defused-xmlrpc

Metadata

Metadata

Assignees

No one assigned

    Labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions