  from django.conf import settings
  from django.http import QueryDict
  from django.http.multipartparser import MultiPartParser as DjangoMultiPartParser
  from django.http.multipartparser import MultiPartParserError
  from rest_framework.compat import yaml, ETParseError, ET_XMLParser
  from rest_framework.exceptions import ParseError
  from rest_framework.compat import six
  from xml.etree import ElementTree as ET
  from xml.parsers.expat import ExpatError
  import json
 
</s> remove from xml.etree import ElementTree as ET
from xml.parsers.expat import ExpatError
 </s> add  </s> remove from decimal import Decimal
 </s> add import pickle
import re </s> remove from rest_framework.compat import yaml, patterns, url, include
 </s> add from rest_framework.compat import yaml, etree, patterns, url, include </s> remove 
 </s> add from django.utils import unittest
from rest_framework.compat import yaml, etree
  from django.conf import settings
  from django.http import QueryDict
  from django.http.multipartparser import MultiPartParser as DjangoMultiPartParser
  from django.http.multipartparser import MultiPartParserError
from rest_framework.compat import yaml, etree
  from rest_framework.exceptions import ParseError
  from rest_framework.compat import six
  from xml.etree import ElementTree as ET
  from xml.parsers.expat import ExpatError
  import json
keep keep keep keep replace keep keep keep keep keep
 defusedxml for security fix.

As per:
http://blog.python.org/2013/02/announcing-defusedxml-fixes-for-xml.html 
rest_framework/parsers.py