[Zope-dev] python 1.6, ZPublisher

I understand that python 1.6 adds methods to string objects. Does this have implications for access control in ZPublisher? I guess that it will be possible to use something like http://localhost/object/private_string_attribute/uppercase to snoop into attributes that are not published if using python 1.5.x (Yes, I know python 1.6 isnt supported for Zope today. I'm mentioning it because it's an interesting issue) Toby Dickenson tdickenson@geminidataloggers.com