B411.md

Pattern: Import of xmlrpclib module

Issue: -

Description

XMLRPC is particularly dangerous as it is also concerned with communicating data over a network. Use defused.xmlrpc.monkey_patch() function to monkey-patch xmlrpclib and mitigate remote XML attacks.

Further Reading

• The Python Standard Library - xmlrpclib
• Python Package Index - defusedxml.xmlrpc
• Bandit - B411: import_xmlrpclib