use defusedxml