davidfischer/rpc4django — pull request #26 by davidfischer (2013-05-30 14:47:34+00:00)
Title: Fixes billion laughs issue

While doing content type detection when the content type header isn't there, use JSON parsing instead of XML parsing because `xml.dom.minidom.parseString()` is vulnerable to the [billion laughs](http://en.wikipedia.org/wiki/Billion_laughs) denial of service attack.

Fixes #20.