On Mon, 29 Sep 2014 18:03:20 +0200 Julien Danjou <julien at danjou.info> wrote: > > It seems that Python fixed that issue with 2 modules released on PyPI: > > https://pypi.python.org/pypi/defusedxml > https://pypi.python.org/pypi/defusedexpat > > I'm no XML expert, and I've only a shallow understanding of the issue, > but I wonder if we should put some efforts to drop xmlutils and our > custom XML fixes to used instead these 2 modules. Nova XML API support is marked as deprecated in Juno. So hopefully we'll be able to just drop XML and associated helper modules within a couple of cycles. Chris