use defusedxml.ElementTree parse

This commit is contained in:
Kalle 2025-04-13 18:41:53 +00:00
parent 7767a0bbd5
commit 01d18b31f4
No known key found for this signature in database
GPG Key ID: 6B4D999517557C1F
2 changed files with 5 additions and 3 deletions

View File

@ -93,6 +93,7 @@ jobs:
- name: Bump org.meshtastic.meshtasticd.metainfo.xml - name: Bump org.meshtastic.meshtasticd.metainfo.xml
shell: bash shell: bash
run: | run: |
pip install defusedxml -q
chmod +x ./bin/bump_metainfo.py chmod +x ./bin/bump_metainfo.py
./bin/bump_metainfo.py --file bin/org.meshtastic.meshtasticd.metainfo.xml "v${{ steps.version.outputs.long }}" ./bin/bump_metainfo.py --file bin/org.meshtastic.meshtasticd.metainfo.xml "v${{ steps.version.outputs.long }}"

View File

@ -1,7 +1,8 @@
#!/usr/bin/env python3 #!/usr/bin/env python3
import xml.etree.ElementTree as ET
from datetime import datetime, timezone
import argparse import argparse
import xml.etree.ElementTree as ET
from defusedxml.ElementTree import parse
from datetime import datetime, timezone
def indent(elem, level=0): def indent(elem, level=0):
@ -28,7 +29,7 @@ def main():
args = parser.parse_args() args = parser.parse_args()
tree = ET.parse(args.file) tree = parse(args.file)
root = tree.getroot() root = tree.getroot()
releases = root.find('releases') releases = root.find('releases')