GitLab

* Added defusedxml to parse untrusted XML data

* Added typecheck disable for defusedxml
Co-authored-by: Nicolas Hug <nicolashug@fb.com>