Log message for revision 41707:
Backported r41704:41705 from 2.9 branch because it is a security fix.
Under Python 2.4 the ZPublisher would allow publication of 'set' and
'frozenset' attributes.
Changed:
U Zope/branches/Zope-2_8-branch/doc/CHANGES.txt
U Zope/branches/Zope-2_8-b
Log message for revision 41706:
Merged Zope 2.9 branch r41704:41705 into the trunk.
Prevent publishing of Python 2.4's 'set' and 'frozenset' types.
Changed:
U Zope/trunk/lib/python/ZPublisher/BaseRequest.py
U Zope/trunk/lib/python/ZPublisher/tests/testBaseRequest.py
-=-
Modified
Log message for revision 41705:
Also prevent publishing of Python 2.4's 'set' and 'frozenset' types.
Changed:
U Zope/branches/2.9/lib/python/ZPublisher/BaseRequest.py
U Zope/branches/2.9/lib/python/ZPublisher/tests/testBaseRequest.py
-=-
Modified: Zope/branches/2.9/lib/python/ZPublis
Log message for revision 41700:
Merged Zope 2.8 branch r41693:41694 into the trunk.
ZPublisher.BaseRequest: The publisher would happily publish attributes
of type 'bool' and 'complex'.
Changed:
U Zope/trunk/lib/python/ZPublisher/BaseRequest.py
U Zope/trunk/lib/python/ZPublisher
Log message for revision 41698:
- Collector #2019: removed validateValue() from cAccessControl (already
removed in former Zope versions from the AccessControl Python
implementation)
Changed:
U Zope/branches/2.9/doc/CHANGES.txt
U Zope/branches/2.9/lib/python/A
Log message for revision 41697:
- Collector #2019: removed validateValue() from cAccessControl (already
removed in former Zope versions from the AccessControl Python
implementation)
Changed:
U Zope/trunk/doc/CHANGES.txt
U Zope/trunk/lib/python/AccessControl/c
Log message for revision 41696:
Merged Zope 2.8 branch r41693:41694 into 2.9 branch.
ZPublisher.BaseRequest: The publisher would happily publish attributes
of type 'bool' and 'complex'.
Changed:
U Zope/branches/2.9/lib/python/ZPublisher/BaseRequest.py
U Zope/branches/2.9/lib/py
Log message for revision 41694:
ZPublisher.BaseRequest: The publisher would happily publish attributes
of type 'bool' and 'complex'.
Changed:
U Zope/branches/Zope-2_8-branch/doc/CHANGES.txt
U Zope/branches/Zope-2_8-branch/lib/python/ZPublisher/BaseRequest.py
U
Zope/branches/Zop
Update of /cvs-repository/Packages/ZPublisher
In directory cvs.zope.org:/tmp/cvs-serv20926/lib/python/ZPublisher
Modified Files:
Tag: Zope-2_7-branch
BaseRequest.py
Log Message:
ZPublisher.BaseRequest: The publisher would happily publish attributes
of type 'bool' and 'complex'.
==
Update of /cvs-repository/Zope/doc
In directory cvs.zope.org:/tmp/cvs-serv20926/doc
Modified Files:
Tag: Zope-2_7-branch
CHANGES.txt
Log Message:
ZPublisher.BaseRequest: The publisher would happily publish attributes
of type 'bool' and 'complex'.
=== Zope/doc/CHANGES.txt 1.625.2.3
Update of /cvs-repository/Packages/ZPublisher/tests
In directory cvs.zope.org:/tmp/cvs-serv20926/lib/python/ZPublisher/tests
Modified Files:
Tag: Zope-2_7-branch
testBaseRequest.py
Log Message:
ZPublisher.BaseRequest: The publisher would happily publish attributes
of type 'bool' and
Log message for revision 41693:
- Collector #1991: ZPublisher did not deal properly with a trailing
%20 in the URL
Changed:
U Zope/branches/Zope-2_8-branch/doc/CHANGES.txt
U Zope/branches/Zope-2_8-branch/lib/python/ZPublisher/Publish.py
U Zope/branches/Zope-2_8-
Log message for revision 41692:
- Collector #1991: ZPublisher did not deal properly with a trailing
%20 in the URL
Changed:
U Zope/trunk/doc/CHANGES.txt
U Zope/trunk/lib/python/ZPublisher/Publish.py
U Zope/trunk/lib/python/ZPublisher/tests/testPublish.py
-=-
Mo
Log message for revision 41691:
- Collector #1991: ZPublisher did not deal properly with a trailing
%20 in the URL
Changed:
U Zope/branches/2.9/doc/CHANGES.txt
U Zope/branches/2.9/lib/python/ZPublisher/Publish.py
U Zope/branches/2.9/lib/python/ZPublisher/tests/t
14 matches
Mail list logo