gh-90949: Recommend hasattr with Expat security methods

Doc/library/pyexpat.rst

@@ -223,10 +223,14 @@ XMLParser Objects
    Calling ``SetReparseDeferralEnabled(True)`` allows re-enabling reparse
    deferral.
 
-   Note that :meth:`SetReparseDeferralEnabled` has been backported to some
-   prior releases of CPython as a security fix.  Check for availability of
-   :meth:`SetReparseDeferralEnabled` using :func:`hasattr` if used in code
-   running across a variety of Python versions.
+   .. note::
+
+      :meth:`SetReparseDeferralEnabled`
+      has been backported to some prior releases of CPython as a security fix.
+      Check for availability of
+      :meth:`SetReparseDeferralEnabled`
+      using :func:`hasattr` if used in code running across a variety of Python
+      versions.
 
    .. versionadded:: 3.13
 
@@ -262,6 +266,15 @@ against some common XML vulnerabilities.
       Activation thresholds below 4 MiB are known to break support for DITA 1.3
       payload and are hence not recommended.
 
+   .. note::
+
+      :meth:`SetBillionLaughsAttackProtectionActivationThreshold`
+      has been backported to some prior releases of CPython as a security fix.
+      Check for availability of
+      :meth:`SetBillionLaughsAttackProtectionActivationThreshold`
+      using :func:`hasattr` if used in code running across a variety of Python
+      versions.
+
    .. versionadded:: next
 
 .. method:: xmlparser.SetBillionLaughsAttackProtectionMaximumAmplification(max_factor, /)
@@ -294,6 +307,15 @@ against some common XML vulnerabilities.
       that can be adjusted by :meth:`.SetBillionLaughsAttackProtectionActivationThreshold`
       is exceeded.
 
+   .. note::
+
+      :meth:`SetBillionLaughsAttackProtectionMaximumAmplification`
+      has been backported to some prior releases of CPython as a security fix.
+      Check for availability of
+      :meth:`SetBillionLaughsAttackProtectionMaximumAmplification`
+      using :func:`hasattr` if used in code running across a variety of Python
+      versions.
+
    .. versionadded:: next
 
 .. method:: xmlparser.SetAllocTrackerActivationThreshold(threshold, /)
@@ -309,6 +331,15 @@ against some common XML vulnerabilities.
    The corresponding :attr:`~ExpatError.lineno` and :attr:`~ExpatError.offset`
    should not be used as they may have no special meaning.
 
+   .. note::
+
+      :meth:`SetAllocTrackerActivationThreshold`
+      has been backported to some prior releases of CPython as a security fix.
+      Check for availability of
+      :meth:`SetAllocTrackerActivationThreshold`
+      using :func:`hasattr` if used in code running across a variety of Python
+      versions.
+
    .. versionadded:: next
 
 .. method:: xmlparser.SetAllocTrackerMaximumAmplification(max_factor, /)
@@ -340,6 +371,15 @@ against some common XML vulnerabilities.
       that can be adjusted by :meth:`.SetAllocTrackerActivationThreshold`
       is exceeded.
 
+   .. note::
+
+      :meth:`SetAllocTrackerMaximumAmplification`
+      has been backported to some prior releases of CPython as a security fix.
+      Check for availability of
+      :meth:`SetAllocTrackerMaximumAmplification`
+      using :func:`hasattr` if used in code running across a variety of Python
+      versions.
+
    .. versionadded:: next
 
 

Doc/library/xml.etree.elementtree.rst

@@ -1398,10 +1398,14 @@ XMLParser Objects
       Disabling reparse deferral has security consequences; please see
       :meth:`xml.parsers.expat.xmlparser.SetReparseDeferralEnabled` for details.
 
-      Note that :meth:`flush` has been backported to some prior releases of
-      CPython as a security fix.  Check for availability of :meth:`flush`
-      using :func:`hasattr` if used in code running across a variety of Python
-      versions.
+      .. note::
+
+         :meth:`flush`
+         has been backported to some prior releases of CPython as a security
+         fix. Check for availability of
+         :meth:`flush`
+         using :func:`hasattr` if used in code running across a variety of
+         Python versions.
 
       .. versionadded:: 3.13
 
@@ -1476,10 +1480,14 @@ XMLPullParser Objects
       Disabling reparse deferral has security consequences; please see
       :meth:`xml.parsers.expat.xmlparser.SetReparseDeferralEnabled` for details.
 
-      Note that :meth:`flush` has been backported to some prior releases of
-      CPython as a security fix.  Check for availability of :meth:`flush`
-      using :func:`hasattr` if used in code running across a variety of Python
-      versions.
+      .. note::
+
+         :meth:`flush`
+         has been backported to some prior releases of CPython as a security
+         fix. Check for availability of
+         :meth:`flush`
+         using :func:`hasattr` if used in code running across a variety of
+         Python versions.
 
       .. versionadded:: 3.13