Re: [Zope-dev] zope.testbrowser release?

2011-10-28 Thread Wolfgang Schnerring
* Benji York be...@benjiyork.com [2011-10-26 16:42]: On Wed, Oct 26, 2011 at 10:26 AM, Wolfgang Schnerring w...@gocept.com wrote: I've added an assertion helper to zope.testbrowser that provides ``assertEllipsis``, which is very helpful when using Testbrowser with unittest.TestCase (instead of

Re: [Zope-dev] Zope 4 publisher/traversal, sprint topic

2011-10-28 Thread yuppie
Hi! Leonardo Rochael Almeida wrote: After the last two rather serious security issues that were recently patched in the Zope2 code base, it is increasingly clear to me that, differently than what Hanno reported some time ago, it's not so much the ZMI that represents a huge security liability

Re: [Zope-dev] Zope 4 publisher/traversal, sprint topic

2011-10-28 Thread Chris Withers
On 28/10/2011 08:46, yuppie wrote: Is that the fault of the publisher? AFAICT the biggest security problem of Zope2 is this line in OFS.SimpleItem.Item: # Allow (reluctantly) access to unprotected attributes __allow_access_to_unprotected_subobjects__=1 I'm not familiar with the

Re: [Zope-dev] zope-tests - FAILED: 9, OK: 37

2011-10-28 Thread Tres Seaver
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 [1]FAILED Bluebream / Python2.6.7 64bit linux https://mail.zope.org/pipermail/zope-tests/2011-October/051792.html I'm assuming thie is the same UCS4 / UCS2 iaaue as #2 and #3. [2]FAILED ZTK 1.0 / Python2.6.7 Linux 64bit

[Zope-dev] zope-tests - FAILED: 10, OK: 37

2011-10-28 Thread Zope tests summarizer
This is the summary for test reports received on the zope-tests list between 2011-10-27 00:00:00 UTC and 2011-10-28 00:00:00 UTC: See the footnotes for test reports of unsuccessful builds. An up-to date view of the builders is also available in our buildbot documentation: