# # spec file for package python-defusedxml # # Copyright (c) 2017 SUSE LINUX GmbH, Nuernberg, Germany. # # All modifications and additions to the file contributed by third parties # remain the property of their copyright owners, unless otherwise agreed # upon. The license for this file, and modifications and additions to the # file, is the same license as for the pristine package itself (unless the # license for the pristine package is not an Open Source License, in which # case the license is the MIT License). An "Open Source License" is a # license that conforms to the Open Source Definition (Version 1.9) # published by the Open Source Initiative. # Please submit bugfixes or comments via http://bugs.opensuse.org/ # %bcond_without tests %{?!python_module:%define python_module() python-%{**} python3-%{**}} Name: python-defusedxml Version: 0.5.0 Release: 0 Summary: XML bomb protection for Python stdlib modules License: Python-2.0 Group: Development/Languages/Python Url: https://pypi.python.org/pypi/defusedxml Source: https://files.pythonhosted.org/packages/source/d/defusedxml/defusedxml-%{version}.tar.gz BuildRequires: fdupes BuildRequires: python-rpm-macros BuildRequires: %{python_module devel} BuildRequires: %{python_module setuptools} BuildRequires: %{python_module xml} Requires: python-xml BuildRoot: %{_tmppath}/%{name}-%{version}-build BuildArch: noarch %python_subpackages %description The results of an attack on a vulnerable XML library can be fairly dramatic. With just a few hundred bytes of XML data an attacker can occupy several gigabytes of memory within seconds. An attacker can also keep CPUs busy for a long time with a small to medium size request. This library allows for XML to be parsed in a manner that avoids these pitfalls. %prep %setup -q -n defusedxml-%{version} %build %python_build %install %python_install %python_expand %fdupes %{buildroot}%{$python_sitelib} %if %{with tests} %check %python_exec setup.py test %endif %files %{python_files} %defattr(-,root,root,-) %doc LICENSE README.txt CHANGES.txt %{python_sitelib}/* %changelog