viettranx e4770956cb fix(security): replace stdlib xml.etree.ElementTree with defusedxml ...

Mitigate XXE Billion Laughs (entity expansion DoS) in DOCX parsing.
5 ET.parse() calls used vulnerable stdlib parser instead of defusedxml
which was already a project dependency.

2026-03-20 21:55:24 +07:00

..

__init__.py

feat(skills): system skills integration — toggle, dep checking, per-item install (#161)

2026-03-12 09:20:41 +07:00

base.py

feat(skills): system skills integration — toggle, dep checking, per-item install (#161)

2026-03-12 09:20:41 +07:00

docx.py

feat(skills): system skills integration — toggle, dep checking, per-item install (#161)

2026-03-12 09:20:41 +07:00

pptx.py

feat(skills): system skills integration — toggle, dep checking, per-item install (#161)

2026-03-12 09:20:41 +07:00

redlining.py

fix(security): replace stdlib xml.etree.ElementTree with defusedxml

2026-03-20 21:55:24 +07:00