Outdated suggestion in your FAQs

[Bernd Schlapsi]

In your FAQ question "How do I use lxml safely as a web-service endpoint?" you suggest to use the wrapper API from defusedxml for a safe lxml usage:
https://git.launchpad.net/lxml/tree/doc/FAQ.txt#n1146

But this wrapper API is deprecated and raises a DeprecationWarning
```
DeprecationWarning: defusedxml.lxml is no longer supported and will be removed in a future release.
    from defusedxml.lxml import fromstring
```

See also:
https://github.com/tiran/defusedxml/issues/25
https://github.com/tiran/defusedxml/issues/31

So some documentation how to replace the `defusedxml.lxml.fromstring` function would be highly appreciated. Especially the parameters `forbid_dtd` and `forbid_entities` which are not available in lxml.

[scoder (scoder)]

Yes, defusedxml is no longer maintained, but it took me about one minute to look up the current implementation there:

https://github.com/tiran/defusedxml/blob/master/defusedxml/lxml.py#L112-L131

Doesn't look very sophisticated. Documentation PR welcome.