Mike Renfro wrote:
On Fri, Jan 17, 2003 at 02:04:57PM +0100, Tue Wennerberg wrote:
I pretty much knew it was a FAQ (should have mentioned that). It came up on our local user group list twice this week. But.. I've googled, I've searched Zope.org and I've checked the archives for this mailing list, but never found an actual explanation.
http://zope.nipltd.com/public/lists/zope-archive.nsf/ByKey/B2A709748C869DA5
Basic summary: easy denial of service possibility if you have untrusted users.
Thank you very much. I did read that mail, but apparently not thoroughly enough. But... If it's only a question of Denial of Service, how are regular expressions any different from python scripts. Surely, a site developer can simply make an infinite loop in his python script. On that basis, I claim that either regular expressions should be allowed, or python scripts should be banned! What am I missing? -- Mvh. Tue Wennerberg Civilingeniør og Freelance Udvikler http://tuewennerberg.dk/ - tue@wennerberg.dk - (+45) 4043 6735