XXE in XML Parser

1from lxml import etree
2
3def parse_user_data(xml_string):
4    # Parse XML from user input
5    parser = etree.XMLParser()
6    doc = etree.fromstring(xml_string, parser)
7    
8    user_data = {
9        'name': doc.find('name').text,
10        'email': doc.find('email').text,
11        'role': doc.find('role').text
12    }
13    
14    return user_data