Files
acrn-hypervisor/misc/config_tools/scenario_config
dongpingx 6f96614e6f misc: Bandit scan issue for lxml
This patch is to fix Bandit scan issue b313-b320 which is vulnerable to
XML attacks when parsing untrusted XML data.

I replace lxml.etree with the equivalent defusedxml package.

I confirm it works after making a Bandit scan, building the configurator
and compiling the acrn.

Signed-off-by: dongpingx <dongpingx.wu@intel.com>
Tracked-On: #8717
2025-08-20 10:20:20 +08:00
..
2021-01-27 11:08:28 +08:00

Please run scenario_cfg_gen.py to generate board related configuration files.

usage: python3 scenario_cfg_gen.py [h] --board <board_info_file> --scenario <scenario_info_file>
positional arguments:
  board_info_file  : file name of the board info XML
  scenario_info_file  : file name of the scenario info XML