From 985bbc0f716397c899e6af69ef431db86923ab34 Mon Sep 17 00:00:00 2001 From: Vincent Pelletier <vincent@nexedi.com> Date: Thu, 2 Jun 2016 11:29:31 +0200 Subject: [PATCH] Restricted: Allow access to urllib string manipulation functions. --- product/ERP5Type/patches/Restricted.py | 6 ++++++ 1 file changed, 6 insertions(+) diff --git a/product/ERP5Type/patches/Restricted.py b/product/ERP5Type/patches/Restricted.py index 6e06613385..0cc1a3f25f 100644 --- a/product/ERP5Type/patches/Restricted.py +++ b/product/ERP5Type/patches/Restricted.py @@ -245,6 +245,12 @@ safe_builtins['__import__'] = guarded_import ModuleSecurityInfo('transaction').declarePublic('doom') +ModuleSecurityInfo('urllib').declarePublic( + 'urlencode', + 'quote', 'unquote', + 'quote_plus', 'unquote_plus', +) + import hmac allow_module('hmac') # HMAC does not sub-class object so ContainerAssertions -- 2.30.9