htmlparser2 still vulnerable in 3.8.2

issue originally reported for 3.7.3 is not fixed yet