[ZDP] BackTalk to Document The Zope Book (2.5 Edition)/Advanced Zope Scripting

webmaster@zope.org webmaster@zope.org
Tue, 28 Jan 2003 14:03:05 -0500


A comment to the paragraph below was recently added via http://www.zope.org/Documentation/Books/ZopeBook/current/ScriptingZope.stx#3-162

---------------

      This code takes an argument and evaluates it in Perl.  This means you
      could call this script from, say an HTML form, and evaluate the
      contents of one of the form elements.  This is not allowed since the
      form element could contain malicious code.

        % Anonymous User - Jan. 28, 2003 2:03 pm:
         the sky's gone out !