Commit 398eb2df authored by Evan Simpson's avatar Evan Simpson

Allow untrusted code to mutate ZPublisher record objects.

parent 5c642ea5
......@@ -8,6 +8,8 @@ Zope Changes
Features added
- Allow untrusted code to mutate ZPublisher record objects.
- Added a "mime-types" configuration value which names a file
giving additional MIME type to filename extension mappings.
The "mime-types" setting may be given more than once in the
......
......@@ -11,7 +11,7 @@
#
##############################################################################
__version__='$Revision: 1.91 $'[11:-2]
__version__='$Revision: 1.92 $'[11:-2]
import re, sys, os, urllib, time, random, cgi, codecs
from types import StringType, UnicodeType
......@@ -1480,6 +1480,7 @@ class record:
# Allow access to record methods and values from DTML
__allow_access_to_unprotected_subobjects__=1
_guarded_writes = 1
def __getattr__(self, key, default=None):
if key in ('get', 'keys', 'items', 'values', 'copy', 'has_key'):
......
Markdown is supported
0%
or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment