Defusedxml – defusing XML bombs and other exploits | Hacker News