[Zope3-dev] Re: Through-the-web reStructuredText

Michael Haubenwallner michael at d2m.at
Fri Jul 7 18:18:10 EDT 2006


Tres Seaver wrote:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
> 
> Jim Fulton wrote:
> 
>> Zope 3, as releases is not affected by the security hole that
>> has plagued Zope 2, however, Michael Haubenwallner has pointed
>> out that some add-on-products, such as zwiki and bugtracker, may
>> provide TTW reST.
> 
> They appear to be "safe" for the moment, but not because they
> intentionally disable file inclusion:  rather, they have a bug (they set
> the 'encoding' to 'unicode', which then causes an exception).
> 

Both restructuredText directives 'include' and 'raw' have an 'encoding' 
option to set the name of text encoding of the external data file/raw 
data (file or URL), it defaults to the document's encoding (if specified).

.. include:: filename.ext
   :encoding: utf-8

.. raw:: html
   :file: filename.ext
   :encoding: utf-8

should work as expected

Michael

-- 
http://zope.org/Members/d2m
http://planetzope.org



More information about the Zope3-dev mailing list