Comment 2 for bug 1903325

It seems that's the issue, yes.

Is there no way to specify a custom protection level? I understand 254 is enough for well-formatted docs, but when i.e. parsing emails, which come from anywhere formatted anyhow, it's necessary to have that protection, but also to be a little more permissive on it. According to my tests, lxml is able to parse 15000 nested nodes in 1 second, and that should be a good cap for those kind of usages.