Hi, When writing this fix [1], I came across code of file_open (in tools/misc.py) where there is some code to manage zipped modules. This feature comes from OpenERP (I developped it) with the goals to manage installation of module from within the client. Of course, we did not take this part of the code for obvious security reasons. Now, I think it is time to remove this code to enforce the usage of proper Python installation (with easy_install or pip). More over, I think it will increase a little bit the boot time of the server.
What is your thoughts ? [1] http://hg.tryton.org/trytond/rev/2b1deeccc838 -- Cédric Krier B2CK SPRL Rue de Rotterdam, 4 4000 Liège Belgium Tel: +32 472 54 46 59 Email/Jabber: [email protected] Website: http://www.b2ck.com/
pgpg2kjxxrH7a.pgp
Description: PGP signature
