use defusedxml.ElementTree parse

This commit is contained in:
Kalle 2025-04-13 18:41:53 +00:00
parent 7767a0bbd5
commit 01d18b31f4
No known key found for this signature in database
GPG Key ID: 6B4D999517557C1F
2 changed files with 5 additions and 3 deletions

View File

@ -93,6 +93,7 @@ jobs:
- name: Bump org.meshtastic.meshtasticd.metainfo.xml
shell: bash
run: |
pip install defusedxml -q
chmod +x ./bin/bump_metainfo.py
./bin/bump_metainfo.py --file bin/org.meshtastic.meshtasticd.metainfo.xml "v${{ steps.version.outputs.long }}"

View File

@ -1,7 +1,8 @@
#!/usr/bin/env python3
import xml.etree.ElementTree as ET
from datetime import datetime, timezone
import argparse
import xml.etree.ElementTree as ET
from defusedxml.ElementTree import parse
from datetime import datetime, timezone
def indent(elem, level=0):
@ -28,7 +29,7 @@ def main():
args = parser.parse_args()
tree = ET.parse(args.file)
tree = parse(args.file)
root = tree.getroot()
releases = root.find('releases')