avocado-framework/avocado

Using xml.dom.minidom.parse to parse untrusted XML data is known to be vulnerable to XML attacks. Replace xml.dom.minidom.parse with its defusedxml equivalent function or make sure defusedxml.defuse_stdlib() is called

Open

            xunit_doc = xml.dom.minidom.parse(xml_output)

• Exclude checks
  • Disable engine
  • Disable check

Using xml.dom.minidom to parse untrusted XML data is known to be vulnerable to XML attacks. Replace xml.dom.minidom with the equivalent defusedxml package, or make sure defusedxml.defuse_stdlib() is called.

Open

import xml.dom.minidom

• Exclude checks
  • Disable engine
  • Disable check

File job_timeout.py has 260 lines of code (exceeds 250 allowed). Consider refactoring.

Open

import glob
import os
import tempfile
import unittest
import xml.dom.minidom