Method test_defusedxml_safe

tests/unit/test_missing_rules.py:244–246

(self)

        assert fires(code, "XXE001"), "XXE001 must fire: etree.fromstring"

    def test_defusedxml_safe(self):
        code = "from defusedxml import etree; root = etree.fromstring(xml_data)"
        assert not_fires(code, "XXE001"), "XXE001 must NOT fire when defusedxml is used"

    def test_resolve_entities_false_safe(self):
        code = "p = etree.XMLParser(resolve_entities=False); tree = etree.parse(f, p)"