Use defusedxml.xmlrpc

[Laerte]

Fix #6250

[codecov]

Codecov Report

Merging #6251 (008ebb6) into master (2d46b4a) will increase coverage by 0.00%.
The diff coverage is 100.00%.

Additional details and impacted files

@@           Coverage Diff           @@
##           master    #6251   +/-   ##
=======================================
  Coverage   88.90%   88.90%           
=======================================
  Files         161      161           
  Lines       11790    11792    +2     
  Branches     1913     1913           
=======================================
+ Hits        10482    10484    +2     
  Misses        980      980           
  Partials      328      328           

Files	Coverage Δ
scrapy/http/request/rpc.py	100.00% <100.00%> (ø)

[Gallaecio]

@wRAR @Laerte Any idea why bandit is passing even though B411 is not in https://github.com/scrapy/scrapy/blob/master/.bandit.yml ?

[wRAR]

B411 is only emitted by a newer version, I haven't published a PR that bumps it yet.

[wRAR]

Thanks!

[wRAR]

Note that PyCQA/bandit#1082 applies here, so we will still need to silence the error until the fix detection is added/fixed.