cloud backend: denial of service attacks against XML parser

[daira]

A malicious cloud service could easily cause a DoS against the storage server using some of the attacks described in ​https://pypi.python.org/pypi/defusedxml/. This is not a particularly serious attack as long as one storage server is associated with each cloud service and that server is running in its own virtual machine, since then the cloud service can only affect its own storage server's virtual machine. OTOH, switching to a library that prevents these attacks would probably be straightforward.