protecting against Moniker abuse.

alternate char codes for < and >, so they needed to be added to the
html_quote logic.

causing allowed() to fail spuriously when called with a not-yet-
wrapped object (as in the case of an import).

The _p_jar attribute was not present because the object hadn't been
placed in the database yet.

user-visible change for now is that property types are now shown for
each property. The actual name/type changing code is pretty minimal,
so it has been committed to the trunk but is not yet exposed. We'd
like to get some community input on the UI to make sure its what we
want (and get the documentation updated) before exposing it.

within the DTML machinery.

an overflow error caused when trying to convert dates sent by certain
versions of Netscape in the If-Modified-Since header.

run from the "test" tab, leading to Bad Things in some cases. The
manage_test method has been changed so that it no longer calls the
SQLMethod object once just to get the query source and then again to
get the results. Now, when __call__ is called with the test__ flag
set, it will return a tuple containing the query source and results.

new tighter security policy because it did not contain the needed
assertion to allow access to its unprotected subobjects (records).