defusedxml is a library that provides safe defaults for xml library configuration.

It would be useful to include documentation on how to use html5lib with a parser that has been configured withdefusedxml.

Also is this even necessary? Does html5lib already take the precautions listed in defusedxml?

see alsomozilla/bleach#158