Replaced xml.etree with defusedxml.ElementTree (#25)

* Corrected deppsource configuration for tests

* Replaced xml.etree with defusedxml.ElementTree
for security reasons

Closed (BAN-B314) Use of an insecure method from `xml.etree.ElementTree` detected #20

Closed (BAN-B405) Import of method(s) from `xml.etree` detected #21

Author: ZigRazor

.deepsource.toml

@@ -1,6 +1,6 @@
 version = 1
 
-test_patterns = ["tests/*.py"]
+test_patterns = ["tests/**"]
 
 [[analyzers]]
 name = "python"

setup.py

@@ -10,6 +10,7 @@
 from os.path import dirname
 from os.path import join
 from os.path import splitext
+import os
 
 from setuptools import find_packages
 from setuptools import setup
@@ -35,9 +36,10 @@ def read(*names, **kwargs):
     author='ZigRazor',
     author_email='[email protected]',
     url='https://github.com/ZigRazor/PyStateMachine',
-    packages=find_packages('src'),
-    package_dir={'': 'src'},
+    packages=[],
+    package_dir={"" : "src"},
     py_modules=[splitext(basename(path))[0] for path in glob('src/*.py')],
+    data_files=[('schema/',['schema/StateMachine.xsd'])],
     include_package_data=True,
     zip_safe=False,
     classifiers=[
@@ -70,9 +72,11 @@ def read(*names, **kwargs):
     ],
     python_requires='>=3',
     install_requires=[
+        'defusedxml>=0.7.1',
         # eg: 'aspectlib==1.1.1', 'six>=1.7',
     ],
     extras_require={
+        'defusedxml': ['defusedxml>=0.7.1'],
         # eg:
         #   'rst': ['docutils>=0.11'],
         #   ':python_version=="2.6"': ['argparse'],

src/ReadStateMachine.py

@@ -4,7 +4,7 @@
 from Action import Action
 from Event import Event
 from State import State
-import xml.etree.ElementTree as ET
+import defusedxml.ElementTree as ET
 
 
 def ReadStateMachineFile(xml_file : str):