arcriley: have you seen this? https://pypi.python.org/pypi/defusedxml
stpeter I've found some more issues that probably should be addressed in the xmpp-websocket rfc. Is there a proper place to keep notes of issues like that?
how about the wiki?