As requested, the PR for countering the unescaped user input vulnerability, found by Tirtha Mandal <mandaltirtha17@gmail.com> https://github.com/IdentityPython/pyFF/pull/161