In addition to this problem, someone has changed manage_form_title.dtml and caused me grief!
The <dtml-var title> tag has been changed to <&dtml-title;>
This causes an implicit html-quote to now be performed which means that my <img> tag, inserted to display the product's icon to more strongly associate what is being created, now just writes the html into the title line.
Since nothing was broken in the first place, how about backing out this change.
That change is one of a number which are designed to prevent cross-site scripting attacks; DTML is particularly vulnerable to such cracks, as it doesn't force the template writer to choose the source from which the name will be bound.
Tres. -- =============================================================== Tres Seaver [EMAIL PROTECTED] Zope Corporation "Zope Dealers" http://www.zope.com
Zope-Dev maillist - [EMAIL PROTECTED]
** No cross posts or HTML encoding! **
(Related lists - http://mail.zope.org/mailman/listinfo/zope-announce