Comment 67 for bug 1100282

Revision history for this message
Dolph Mathews (dolph) wrote : Re: DoS through XML entity expansion

@Christian Heimes: The patches for keystone are applicable to lxml.etree, and set resolve_entities=False to address that specific issue.