https://github.com/tiran/defusedxml/ https://pypi.org/project/defusedxml/
