[fonttools/fonttools] 75319d: [misc.etree] don't resolve entities on lxml >= 5.0...

[Cosimo Lupo]

Branch: refs/heads/etree-no-param-entities
Home: https://github.com/fonttools/fonttools
Commit: 75319de3a22d5b555022952d651c49d67f5dd23e
https://github.com/fonttools/fonttools/commit/75319de3a22d5b555022952d651c49d67f5dd23e
Author: Cosimo Lupo <cos...@anthrotype.com>
Date: 2026-09-18 (Fri, 18 Sep 2026)

Changed paths:
M Lib/fontTools/misc/etree.py
M Tests/misc/etree_test.py

Log Message:
-----------
[misc.etree] don't resolve entities on lxml >= 5.0 either

lxml 5.0 to 6.1.2 still fetch external parameter entities with the default
resolve_entities="internal", so an external DTD fragment can declare a general
entity holding the contents of a local file. Drop the LXML_VERSION guard and
always default to resolve_entities=False; lxml 6.1.3 fixed the parameter entity
case upstream, but we support older versions.



To unsubscribe from these emails, change your notification settings at https://github.com/fonttools/fonttools/settings/notifications