[Zope] Object's lines properties break code in Zope264rc2
J Cameron Cooper
xdoclet at jcameroncooper.com
Tue Feb 10 16:10:08 EST 2004
Ausum Studio wrote:
>>>An object with lines properties in Zope264rc2 returns a tuple, while in
>>>Zope261 it returns a list.
>>>I haven't found information about this, neither in the 264rc2's
>>>nor within this list. Is it a bug or a new feature?
>>It is a bug fix / security fix. Storing properties in lists
>>is bad because lists are mutable and cannot be protected
>>directly using security assertions. ...
>I used to use that as a feature, though I agree that it can also be a
>potential security breach. Maybe it's worth the pain to put that as a
>configurable feature in z2.py, and the new standard as default.
>Otherwise I'm afraid I'll have a rewriting weekend. Does this break code to
Won't 'list(prop)' work? Or are you trying to change the property's
contents in place? Even so, it's not hard to fix.
"He who fights with monsters should look to it that he himself does not become a monster. And when you gaze long into an abyss the abyss also gazes into you."
More information about the Zope