bpo-17239: Disable external entities in SAX parser by tiran · Pull Request #9217 · python/cpython (original) (raw)

You might only list 3.8.0, but complete this table once we fixed other branches.

I'm not sure about backporting this backward incompatible change to other branches, but if we do it, we should also fix 3.4 and 3.5, no?