Re: [Zope-dev] Vulnerability: attacking can get file list and directory

From: Chris Withers <chrisw@nipltd.com>

The traceback should _not_ be _appended_ to the error message. If an app developer chooses to show it, then fine they can as they do already (mine sends me an error email ;-), but why should it be appended in all circumstances

Be careful of that -- I recently got *flooded* with error emails from a recent bout of the Code Red worm looking for files that weren't on my server :(