(self)
| 234 | |
| 235 | class TestXXE001: |
| 236 | def test_etree_parse_fires(self): |
| 237 | code = "from lxml import etree; tree = etree.parse(user_file)" |
| 238 | assert fires(code, "XXE001"), "XXE001 must fire: etree.parse without safe parser" |
| 239 | |
| 240 | def test_etree_fromstring_fires(self): |
| 241 | code = "from lxml import etree; root = etree.fromstring(xml_data)" |