[Zope-dev] collector issue 863 propfind bugfix

2003-03-24 Thread Simon Eisenmann
See: http://collector.zope.org/Zope/863 the attached patch file solves this problem by always setting the handle_xml method with default parameters if body does not start with ?xml .. the patch is against lib/python/Shared/DC/xml/xmllib.py of zope version 2.6.1 best regards, simon --

Re: [Zope-dev] Possible security problem with DTML

2003-03-24 Thread Leonardo Rochael Almeida
On Fri, 2003-03-21 at 20:08, kosh wrote: I am having a problem where DTML is allowing access to an attribute of an object that restrictedTraverse and regular . notation denies from a python script. This is pretty serious. You should post this as a bug in the collector. Cheers, Leo

Re: [Zope-dev] collector issue 863 propfind bugfix

2003-03-24 Thread Leonardo Rochael Almeida
On Mon, 2003-03-24 at 09:00, Simon Eisenmann wrote: See: http://collector.zope.org/Zope/863 the attached patch file solves this problem by always setting the handle_xml method with default parameters if body does not start with ?xml .. Please attach the patch to the collector item in

Re: [Zope-dev] Possible security problem with DTML

2003-03-24 Thread kosh
On Monday 24 March 2003 09:05 am, Leonardo Rochael Almeida wrote: On Fri, 2003-03-21 at 20:08, kosh wrote: I am having a problem where DTML is allowing access to an attribute of an object that restrictedTraverse and regular . notation denies from a python script. This is pretty serious.

Re: [Zope-dev] Let's have another bug day

2003-03-24 Thread Lennart Regebro
Leonardo Rochael Almeida wrote: Hi people, It's been some time now since we last had a bug day. Should we have another one? I'd like one. :) ___ Zope-Dev maillist - [EMAIL PROTECTED] http://mail.zope.org/mailman/listinfo/zope-dev ** No cross

Re: [Zope-dev] Possible security problem with DTML

2003-03-24 Thread Shane Hathaway
On 03/24/2003 12:28 PM, kosh wrote: On Monday 24 March 2003 09:05 am, Leonardo Rochael Almeida wrote: On Fri, 2003-03-21 at 20:08, kosh wrote: I am having a problem where DTML is allowing access to an attribute of an object that restrictedTraverse and regular . notation denies from a python