Merge pull request #6251 from Laerte/master

Use defusedxml.xmlrpc
scrapy · Feb 28, 2024 · 415c474 · 415c474
2 parents 2d46b4a + 008ebb6
commit 415c474
Show file tree

Hide file tree

Showing 2 changed files with 5 additions and 0 deletions.
diff --git a/scrapy/http/request/rpc.py b/scrapy/http/request/rpc.py
@@ -7,9 +7,13 @@
 import xmlrpc.client as xmlrpclib
 from typing import Any, Optional
 
+import defusedxml.xmlrpc
+
 from scrapy.http.request import Request
 from scrapy.utils.python import get_func_args
 
+defusedxml.xmlrpc.monkey_patch()
+
 DUMPS_ARGS = get_func_args(xmlrpclib.dumps)
 
 

diff --git a/setup.py b/setup.py
@@ -22,6 +22,7 @@
     "packaging",
     "tldextract",
     "lxml>=4.4.1",
+    "defusedxml>=0.7.1",
 ]
 extras_require = {
     ':platform_python_implementation == "CPython"': ["PyDispatcher>=2.0.5"],