[Checkins] [zopefoundation/Zope] ce2086: Ensure that request objects cannot be published di...

[GitHub]

  Branch: refs/heads/master
  Home:   https://github.com/zopefoundation/Zope
  Commit: ce2086b554d16cc40b064776b26b03e5ecc9e83b
      https://github.com/zopefoundation/Zope/commit/ce2086b554d16cc40b064776b26b03e5ecc9e83b
  Author: Tres Seaver <tseaver at palladion.com>
  Date:   2015-06-24 (Wed, 24 Jun 2015)

  Changed paths:
    M CHANGES.rst
    M src/ZPublisher/BaseRequest.py
    M src/ZPublisher/HTTPRequest.py
    M src/ZPublisher/tests/testBaseRequest.py
    M src/ZPublisher/tests/testHTTPRequest.py

  Log Message:
  -----------
  Ensure that request objects cannot be published directly via a URL.

See:  https://bugs.launchpad.net/zope2/+bug/789863

This change applies Leo Rochael's patch from:
https://bugs.launchpad.net/zope2/+bug/789863/+attachment/3624368/+files/0001-Make-the-request-object-unpublishable.patch

And the ideas from Richard Mitchell's patch at:
https://bugs.launchpad.net/zope2/+bug/789863/+attachment/3625765/+files/request_object.patch