Eric Bréhault wrote at 2007-3-5 13:14 +0100:
>I have build a Plone product which allows users to enter a piece of Python
>code.
>This way, users can easily define their own actions without changing the
>product source code.
>
>Those pieces of code are executed using the exec Python command.

I would instead use TALES expressions of type python.

There are restricted -- which is very essential if you cannot
fully trust your users.



-- 
Dieter
_______________________________________________
Zope maillist  -  Zope@zope.org
http://mail.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
 http://mail.zope.org/mailman/listinfo/zope-announce
 http://mail.zope.org/mailman/listinfo/zope-dev )

Reply via email to