Re: [Zope-dev] Security audit introduced problem in PageTemplates/Expression.py

2004-01-14 Thread Stuart Bishop
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 13/01/2004, at 4:19 PM, Stuart Bishop wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 The 'security audit work for the 2.7 branch' commit on 8th Jan made the following change in PageTemplates/Expression.py: As well as in other locations such as

[Zope-dev] Security audit introduced problem in PageTemplates/Expression.py

2004-01-12 Thread Stuart Bishop
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 The 'security audit work for the 2.7 branch' commit on 8th Jan made the following change in PageTemplates/Expression.py: *** *** 312,318 # Skip directly to item access o = object[name] # Check a