cgtobi/PyRMVtransport

Using objectify to parse untrusted XML data is known to be vulnerable to XML attacks. Replace objectify with the equivalent defusedxml package.

Open

from lxml import objectify  # type: ignore

• Exclude checks
  • Disable engine
  • Disable check

RMVjourney has 25 functions (exceeds 20 allowed). Consider refactoring.

Open

class RMVjourney:
    """A journey object to hold information about a journey."""

    def __init__(self, journey: objectify.ObjectifiedElement, now: datetime) -> None:
        """Initialize the journey object."""