Ensured that all HTTP headers are sent as normal strings and not Unicode.

Removed most <dtml-var> to replace them with &dtml-foo;.
This corrects a number of potential XSS holes, and simplifies
auditability of the remaining legitimate <dtml-var>.

version:

- If the setlocale() call fails, don't fail the test -- just skip it
  silently.  XXX This is not ideal, but what else can we do?  Locale
  names are not standardized; the test fails on Mac OSX, and
  apparently on older Linux versions (e.g. my Mandrake 8.1).

- Don't use non-ASCII literals; use \xXX escapes.

bsddb3Storage becomes BDBStorage
Full becomes BDBFullStorage
Minimal becomes BDBMinimalStorage

Removing MinimalReplicated.py, Packless.py, and base.py

        manage_afterClone in the saem way that manage_pasteObjects does.

        that are not Zope products.

Some calls to os.system('chmod') has been replaced with the more portable os.chmod() call, to make install work properly on Windows.

Merge to HEAD: The ZEO unit tests and wo_pcgi.py didn't run on Windows if the path to the python executable included a space.

someone tries to use 'client' as an argument to a zsql method.

Support getattr on PermissionRole instances to allow access to _p, _d, __name__m and __roles__ (patch submitted by Dieter Maurer in collector #161).

ZODB works around this situation, but it probably shouldn't.
AdaptableStorage doesn't allow it.

Collector #479: Catalog tab now correctly puts "Unknown" in the type column for cataloged objects with no meta_type metadata column

Merge with HEAD: Collector #256: Added a check in _doChangeUser to make sure passwords isn't encrypted twice.

_dorestore(): Adopt the FileStorage semantics for when the transaction
pointed to by prev_txn does not exist.  This can happen if we're
restoring to a storage where that transaction has been packed away.
In that case, treat prev_txn as a hint and ignore it. :)

_TransactionsIterator.__len__(): Give this a dummy (and lying)
implementation which is just good enough for Python 2.1.3 support.

the environment has been closed.  Fortunately, there's another way.

Add some more logging.

Catalog empty results are now always a LazyCat([]) rather than a LazyCat(SomeEmptySequencishThingFromTheIndexes)

read_only flag on the config object, and BerkeleyBase sets
self._is_read_only when this flag is true, but it leaves any
ReadOnlyError raising to BaseStorage.

function to clean up all the files that a FileStorage creates.
Sometimes it's handy to do a cleanup if you have the instance, other
times you only have the Data.fs file name.