Is anyone else using Opera 7 with Zope? Have you noticed this dangerous bug? http://my.opera.com/forums/showthread.php?threadid=23618 I reported it a year ago on the O7 beta list and they seem to not care enough to fix it. I know it's an Opera bug, but what change, if any, could be made to Zope to rid it of the wrap="off" that triggers this bug without losing the functionality it provides? -- Ron Bickers Logic Etc, Inc.
Is anyone else using Opera 7 with Zope? Have you noticed this dangerous bug?
Wow. I'm always thought that this is "annoying Zope feature". :))) Yes, I've seen this with Opera 7 and most probably even with Opera 6 (eating blank lines after form submit in ZMI). However, it doesn't made me any harm, i don't loose any data.
On 02/25/2004 11:01 AM, Sergey Volobuev wrote:
Wow. I'm always thought that this is "annoying Zope feature". :))) Yes, I've seen this with Opera 7 and most probably even with Opera 6 (eating blank lines after form submit in ZMI). However, it doesn't made me any harm, i don't loose any data.
If you edit the data Opera shows you after it has eaten the blank lines, you're losing data. Take, for example, the following DTML Method: <dtml-sendmail mailhost="MailHost"> From: sender@example.com To: recipient@example.com Subject: Test Message This is a test. </dtml-sendmail> When you edit this in Opera, it doesn't show the blank line between the message header and body. When you submit your changes, you end up with one large malformed header and no message body. I believe I tested Opera 6 and it doesn't have this bug. -- Ron Bickers Logic Etc, Inc.
I have noticed that more and more sites are hotlinking images from my Zope site. There seem to be solutions for Apache using .httaccess but nothing in Zope or for the products. I did find this. http://zope.org/Members/terry/VarImage/swpackage_view Has anyone come up with a good Zope based solution? Jake ____________________ http://www.ZopeZone.com "Zoping for the rest of us"
I have noticed that more and more sites are hotlinking images from my Zope site. There seem to be solutions for Apache using .httaccess but nothing in Zope or for the products.
I did find this. http://zope.org/Members/terry/VarImage/swpackage_view
Has anyone come up with a good Zope based solution?
It should be possible to create your own type of image that changes behavior if the Referer stored in the REQUEST does not equal your site's hostname. It's certainly not foolproof, but would definitely beat most people that do deep-linking of images. jens
Jake wrote at 2004-3-20 07:46 -0500:
I have noticed that more and more sites are hotlinking images from my Zope site. There seem to be solutions for Apache using .httaccess but nothing in Zope or for the products.
I did find this. http://zope.org/Members/terry/VarImage/swpackage_view
Has anyone come up with a good Zope based solution?
You may use a "SiteAccess" "AccessRule" to check unwanted access to your images. -- Dieter
Hi Jake,
I have noticed that more and more sites are hotlinking images from my Zope site. There seem to be solutions for Apache using .httaccess but nothing in Zope or for the products.
the easiest solution would be to create a Python Script, that returns the image in case the referer matches your site or otherwise returns an image with a message like "block due to copyright infringment". This solution will cause some work on your site, cause you will have to move all your images to a new location and replace the old one with the script. If you have Zope behind Apache you could also block requests in Apache. Apache allows to check referer for blocking, but you can't send them an alternative image. Ulrich
Image has a 'precondition' field, which if I remember right is some method executed before accessing the image... maybe you could write a method to check the http referrer, and see if it's within your site? Or maybe monkeypatch Image to do that with every image? On Monday, March 22, 2004, at 04:30 AM, Ulrich Wisser wrote:
Hi Jake,
I have noticed that more and more sites are hotlinking images from my Zope site. There seem to be solutions for Apache using .httaccess but nothing in Zope or for the products.
the easiest solution would be to create a Python Script, that returns the image in case the referer matches your site or otherwise returns an image with a message like "block due to copyright infringment". This solution will cause some work on your site, cause you will have to move all your images to a new location and replace the old one with the script.
If you have Zope behind Apache you could also block requests in Apache. Apache allows to check referer for blocking, but you can't send them an alternative image.
Ulrich
_______________________________________________ Zope maillist - Zope@zope.org http://mail.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://mail.zope.org/mailman/listinfo/zope-announce http://mail.zope.org/mailman/listinfo/zope-dev )
participants (8)
-
Dieter Maurer -
Jake -
Jens Vagelpohl -
Marc Lindahl -
Ron Bickers -
Ron Bickers -
Sergey Volobuev -
Ulrich Wisser