- Add a request method decorator to AccessControl, creating decorators that limit a method to one request method only.
- Protect various security-setting-mutators with a POST-only decorator.

Add a 'method' key to the HTTPRequest.other, containing the uppercased REQUEST_METHOD. This makes HTTPRequest a little bit more compatible with Zope3 IHTTPRequest.

Use a decorator to save and restore thread-local state.

No longer opens a zodb connection every time a ProductDispatcher is looked up, forward ported from zope 2.10 branch r72990 and five 1.5 branch r72986.

Fix for #2288: do not quote + and @ characters when forming BaseRequest and HTTPRequest URL variables

Raise SyntaxError when encountering invalid PythonScript headers.

See http://mail.zope.org/pipermail/zope/2007-February/170537.html

in the Z3 world

context of the current object

lot, but even better, we should take further steps towards using the z3 publisher.

in zope.tal.xmlparsers.XMLParser.parseString()

that will raise an exception (undetected so far)