Added defusedxml to parse untrusted XML data

requirements.txt

@@ -28,3 +28,6 @@ pytest-pythonpath
 # Coverage statistics
 pytest-cov
 codecov
+
+# To parse untrusted XML data
+defusedxml

torchtext/data/datasets_utils.py

@@ -11,7 +11,10 @@
     unicode_csv_reader,
 )
 import codecs
-import xml.etree.ElementTree as ET
+try:
+    import defusedxml.ElementTree as ET
+except ImportError:
+    import xml.etree.ElementTree as ET
 """
 These functions and classes are meant solely for use in torchtext.datasets and not
 for public consumption yet.

torchtext/legacy/datasets/translation.py

@@ -1,5 +1,8 @@
 import os
-import xml.etree.ElementTree as ET
+try:
+    import defusedxml.ElementTree as ET
+except ImportError:
+    import xml.etree.ElementTree as ET
 import glob
 import io
 import codecs