On 11/2/09 16:00 , Mario Ruggier wrote: > > On Nov 2, 2009, at 3:41 PM, Wichert Akkerman wrote: >> On 11/2/09 15:28 , Mario Ruggier wrote: >>> The (big) gain... is that Evoque can be sandboxed (i.e. let >>> your untrusted user modify the template source!), a feature that no >>> other templating system had *designed-in* from the start. >> >> You mean like Zope PageTemplates since its creation about 10 years >> ago? > > If you say so, I guess not ;-) Does ZPT allow embedding (most) python > expressions?
It allows Python expressions, and runs them in a special sandbox (see http://pypi.python.org/pypi/RestrictedPython ). Zope has always allowed untrusted people to use python in a secure manner. > My impression is that ZPT was designed to primarily > output X/HTML (altho I think it can be made to output arbitrary text- > based formats) so I tend to think of it as a beast of a different > kind, that is not comparable to mako/evoque class of text-based > templating (performance would certainly not be comparable). Zope also ships with DTML (which is much older than ZPT) which is possibly more similar and possibly more comparable to text-based templating languages. You seem to imply that attribute-style languages such as ZPT (or Genshi/kid/meld/etc.) have to be slower than text-based languages. I think chameleon has proven that that is not the case: its zpt and genshi implementations are on par with Mako. Wichert. --~--~---------~--~----~------------~-------~--~----~ You received this message because you are subscribed to the Google Groups "pylons-discuss" group. To post to this group, send email to [email protected] To unsubscribe from this group, send email to [email protected] For more options, visit this group at http://groups.google.com/group/pylons-discuss?hl=en -~----------~----~----~----~------~----~------~--~---
