[issue17538] Document XML Vulnerabilties

[Christian Heimes]

Christian Heimes added the comment:

1. sounds fine to me

2. I can copy some text from the README.txt of defusedxml. CSV table was easier to maintain for me. What's a good tool to create and modify sphinx tables?

3. No strong opinion here, better safe than sorry?

4. IMO the warning should mention both. Perhaps a better explanation will help?

----------

_______________________________________
Python tracker <report at bugs.python.org>
<http://bugs.python.org/issue17538>
_______________________________________