Thomas Lotze wrote:
Tonico Strasser wrote:


Just for my understanding: would it be possible to dynamically create
macros with strictinsert=True?:


It means that if <div tal:content="structure foo/bar" /> is interpreted
with strictinsert=True on the TALInterpreter used, foo/bar had better
resolve to something well-formed.

If that was the only behavior, it would be a mildly interesting feature for some use cases, but...

<div
  tal:repeat="name python: ('foo', 'bar', 'baz')" tal:replace="structure
  string:&lt;div metal:define-macro='$name'/&gt;" />

this is definitely something we DON'T want, a potential security hole and useless feature.

+1 on removing strictinsert.

Florent

--
Florent Guillaume, Nuxeo (Paris, France)   CTO, Director of R&D
+33 1 40 33 71 59   http://nuxeo.com   [EMAIL PROTECTED]
_______________________________________________
ZPT mailing list
ZPT@zope.org
http://mail.zope.org/mailman/listinfo/zpt

Reply via email to