use defusedxml, silence bandit warnings

This commit is contained in:
Miguel Jacq 2025-11-27 15:10:45 +11:00
parent 9faa2d2e2e
commit 910234ed65
Signed by: mig5
GPG key ID: 59B3F0C24135C6A9
4 changed files with 22 additions and 6 deletions

View file

@ -16,6 +16,7 @@ repository = "https://git.mig5.net/mig5/jinjaturtle"
python = "^3.10"
PyYAML = "^6.0"
tomli = { version = "^2.0.0", python = "<3.11" }
defusedxml = "^0.7.1"
[tool.poetry.group.dev.dependencies]
pytest = "^7.0"