Lobbying (was: [Zope] html_quote in python methods?)
Jim Washington writes:
Can I keep this from happening? html_quote does not seem to be in the Python Method namespace. Please help lobbying that the functionality of all "dtml-var" attributes are exposed as standard functions.
The functions are there already, just not exposed to DTML and PythonScripts. Dieter
Dieter Maurer wrote:
Jim Washington writes:
Can I keep this from happening? html_quote does not seem to be in the Python Method namespace. Please help lobbying that the functionality of all "dtml-var" attributes are exposed as standard functions.
The functions are there already, just not exposed to DTML and PythonScripts.
I'll second this. It'd be _so_ nice... ever wanted to do: <dtml-call "somemethod(absolute_url()+urlquote(_.getitem(id))"> :-) Chris
[Chris Withers] | I'll second this. It'd be _so_ nice... | | ever wanted to do: | | <dtml-call "somemethod(absolute_url()+urlquote(_.getitem(id))"> I totally agree. -Morten
[Chris Withers] | <dtml-call "somemethod(absolute_url()+urlquote(_.getitem(id))"> What about security issues? Wouldn't this also allow those methods to be called TTW by any user?
Erik Enge wrote:
[Chris Withers]
| <dtml-call "somemethod(absolute_url()+urlquote(_.getitem(id))">
What about security issues? Wouldn't this also allow those methods to be called TTW by any user?
No. Even if it did, what harm would it do? cheers, Chris
[Chris Withers] | Even if it did, what harm would it do? Denial of Service attacks was what I though of. But it's a non-issue I guess.
From: Chris Withers <chrisw@nipltd.com>
<dtml-call "somemethod(absolute_url()+urlquote(_.getitem(id))">
Well, in Python Scripts at least, you can do:: from Products.PythonScripts.standard import special_formats url_quote = special_formats['url-quote'] return url_quote("<OK?>") It's not great, but it's something. Cheers, Evan @ digicool & 4-am
Evan Simpson wrote:
From: Chris Withers <chrisw@nipltd.com>
<dtml-call "somemethod(absolute_url()+urlquote(_.getitem(id))">
Well, in Python Scripts at least, you can do::
from Products.PythonScripts.standard import special_formats
Hmmm... can you do something similar to perform an XML-RPC call into another Zope instance? cheers, Chris
participants (5)
-
Chris Withers -
Dieter Maurer -
Erik Enge -
Evan Simpson -
morten＠esol.no