viettranx e4770956cb fix(security): replace stdlib xml.etree.ElementTree with defusedxml ...

Mitigate XXE Billion Laughs (entity expansion DoS) in DOCX parsing.
5 ET.parse() calls used vulnerable stdlib parser instead of defusedxml
which was already a project dependency.

2026-03-20 21:55:24 +07:00

..

helpers

fix(security): replace stdlib xml.etree.ElementTree with defusedxml

2026-03-20 21:55:24 +07:00

schemas

feat(skills): system skills integration — toggle, dep checking, per-item install (#161)

2026-03-12 09:20:41 +07:00

validators

fix(security): replace stdlib xml.etree.ElementTree with defusedxml

2026-03-20 21:55:24 +07:00

pack.py

feat(skills): system skills integration — toggle, dep checking, per-item install (#161)

2026-03-12 09:20:41 +07:00

unpack.py

feat(skills): system skills integration — toggle, dep checking, per-item install (#161)

2026-03-12 09:20:41 +07:00

validate.py

feat(skills): system skills integration — toggle, dep checking, per-item install (#161)

2026-03-12 09:20:41 +07:00