On Fri, 26 May 2000 15:14:56 +0200, Martijn Pieters <[EMAIL PROTECTED]>
wrote:
>> Shame there's no "safe pickle option" that allows only numbers, strings,
>> lists, tuples and dictionaries.
>
>There is actually. It's called marshal:
>
> http://www.python.org/doc/current/lib/module-marshal.html
>
[Keeping [EMAIL PROTECTED] in the loop for the archive]
On Fri, May 26, 2000 at 02:05:42PM +0100, Steve Alexander wrote:
> Martijn Pieters wrote:
> > On Fri, May 26, 2000 at 11:05:23AM +0100, Steve Alexander wrote:
> > > Here's a very silly idea:
> > >
> > > Could you pickle and Base64 encode the
On Fri, May 26, 2000 at 11:05:23AM +0100, Steve Alexander wrote:
> Here's a very silly idea:
>
> Could you pickle and Base64 encode the data you want to pass, and then
> shove it in a single hidden control?
I am afraid that is a very silly security hole. Anyone can replace that pickle
with any o
Stuart 'Zen' Bishop wrote:
>
> I almost got around to doing this for GUF. It would involve interrogating
> REQUEST.form, and generating a load of hidden controls.
>
> One problem to be solved is that in some cases Zope will have messed
> with your form data before your code sees it (The name="my
On Fri, 26 May 2000, Andrew H. Chatham wrote:
> This works great, but I'd rather not limit people to passing things in
> GET, for various reasons (quiz answers showing up in the browser
> history, requests being too large, etc.). But I don't know what the
> variables are beforehand, so I can't j