René's URL Explorer Experiment

{"@context":"https://schema.org","@type":"DiscussionForumPosting","headline":"XML vulnerabilities in Python","articleBody":"BPO | [17239](https://bugs.python.org/issue17239)\n--- | :---\nNosy | @warsaw, @birkenfeld, @rhettinger, @pitrou, @scoder, @larryhastings, @tiran, @benjaminp, @jwilk, @ned-deily, @mcepl, @ezio-melotti, @mitar, @vadmium, @serhiy-storchaka, @zooba\nPRs | \u003cli\u003epython/cpython#9217\u003c/li\u003e\u003cli\u003epython/cpython#9265\u003c/li\u003e\u003cli\u003epython/cpython#9511\u003c/li\u003e\u003cli\u003epython/cpython#9512\u003c/li\u003e\nDependencies | \u003cli\u003ebpo-17318: xml.sax and xml.dom fetch DTDs by default (✅) \u003c/li\u003e\u003cli\u003ebpo-24238: Avoid entity expansion attacks in Element Tree \u003c/li\u003e\nFiles | \u003cli\u003e[xmlbomb_20130219.patch](https://bugs.python.org/file29122/xmlbomb_20130219.patch \"Uploaded as text/plain at 2013-02-19.15:35:35 by @tiran\")\u003c/li\u003e\u003cli\u003e[xmlbomb_20150518.patch](https://bugs.python.org/file39415/xmlbomb_20150518.patch \"Uploaded as text/plain at 2015-05-18.02:59:44 by @vadmium\"): Merged to 3.5\u003c/li\u003e\n\n\u003csup\u003e*Note: these values reflect the state of the issue at the time it was migrated and might not reflect the current state.*\u003c/sup\u003e\n\n\u003cdetails\u003e\u003csummary\u003eShow more details\u003c/summary\u003e\u003cp\u003e\n\nGitHub fields:\n```python\nassignee = None\nclosed_at = None\ncreated_at = \u003cDate 2013-02-19.15:35:41.914\u003e\nlabels = ['type-security', 'expert-XML', '3.8', '3.9', 'extension-modules', '3.7', 'library']\ntitle = 'XML vulnerabilities in Python'\nupdated_at = \u003cDate 2021-11-08.16:56:41.595\u003e\nuser = 'https://github.com/tiran'\n```\n\nbugs.python.org fields:\n```python\nactivity = \u003cDate 2021-11-08.16:56:41.595\u003e\nactor = 'vstinner'\nassignee = 'none'\nclosed = False\nclosed_date = None\ncloser = None\ncomponents = ['Extension Modules', 'Library (Lib)', 'XML']\ncreation = \u003cDate 2013-02-19.15:35:41.914\u003e\ncreator = 'christian.heimes'\ndependencies = ['17318', '24238']\nfiles = ['29122', '39415']\nhgrepos = []\nissue_num = 17239\nkeywords = ['patch']\nmessage_count = 23.0\nmessages = ['182393', '184285', '184289', '184387', '185053', '243450', '243469', '243581', '324416', '324685', '325562', '325573', '325586', '325590', '325595', '325610', '325642', '325648', '325702', '325738', '326144', '326228', '326229']\nnosy_count = 20.0\nnosy_names = ['barry', 'georg.brandl', 'rhettinger', 'pitrou', 'scoder', 'larry', 'christian.heimes', 'benjamin.peterson', 'jwilk', 'ned.deily', 'mcepl', 'ezio.melotti', 'Arfrever', 'eli.bendersky', 'mitar', 'martin.panter', 'serhiy.storchaka', 'franck', 'steve.dower', 'rsandwick3']\npr_nums = ['9217', '9265', '9511', '9512']\npriority = 'critical'\nresolution = None\nstage = 'patch review'\nstatus = 'open'\nsuperseder = None\ntype = 'security'\nurl = 'https://bugs.python.org/issue17239'\nversions = ['Python 3.7', 'Python 3.8', 'Python 3.9']\n```\n\n\u003c/p\u003e\u003c/details\u003e\n\nbpo-24238 is https://github.com/python/cpython/issues/68426 which remains open.","author":{"url":"https://github.com/tiran","@type":"Person","name":"tiran"},"datePublished":"2013-02-19T15:35:42.000Z","interactionStatistic":{"@type":"InteractionCounter","interactionType":"https://schema.org/CommentAction","userInteractionCount":23},"url":"https://github.com/61441/cpython/issues/61441"}