old_contents: from django.conf.urls import url
  from corehq.messaging.smsbackends.trumpia.views import TrumpiaIncomingView
  
  
  urlpatterns = [
      url(r'^sms/(?P<api_key>[\w-]+)/?$', TrumpiaIncomingView.as_view(),
          name=TrumpiaIncomingView.urlname),
  ]
  
new_contents: from django.conf.urls import url
  
  from corehq.apps.hqwebapp.decorators import waf_allow
  from corehq.messaging.smsbackends.trumpia.views import TrumpiaIncomingView
  
  
  urlpatterns = [
      url(r'^sms/(?P<api_key>[\w-]+)/?$', waf_allow('XSS_QUERYSTRING')(TrumpiaIncomingView.as_view()),
          name=TrumpiaIncomingView.urlname),
  ]
  
subject: Annotate trumpia url to say it allows XML in the querystring