diff --git a/vulnerable_xxe.py b/vulnerable_xxe.py
index b9fc887..f2bb496 100644
--- a/vulnerable_xxe.py
+++ b/vulnerable_xxe.py
@@ -47,7 +47,8 @@ def upload_xml():
     xml_file = request.files['file']
     content = xml_file.read()
     
-    root = ET.fromstring(content)
+    import defusedxml.ElementTree as SafeET
+    root = SafeET.fromstring(content)
     
     return f"Uploaded: {root.tag}"