[Zope-dev] Security hole in CookieCrumbler

Hi folks, It turns out that the released versions of the CookieCrumbler product have a terrible security hole. I recommend you uninstall it immediately. I'm not going to be able to deal with the problem fully today, but if you're interested in getting a solution right away you can grab today's PTK from CVS which contains a version of CookieCrumbler without the hole. Thanks to Phil Harris for finding the problem. Shane