Problem with regular expressions in python scripts (get an unauthorized error message)
I'm trying to use a regular expression in python-script. It gives me an unauthorized error every time I try to run it. Saving the script works without errors. What do I do wrong..?!! Here is my script: Parameter list: str, newstr, expr="<[^>]*>" import re ret = "" res = re.split(expr, str) for x in len(res): ret = ret + res[x] ret = ret + newstr ret = ret + res[len(res) - 1] return ret The full errormessage is as follows: Traceback (innermost last): File /var/zope/Zope-2.3-ebok/lib/python/ZPublisher/Publish.py, line 223, in publish_module File /var/zope/Zope-2.3-ebok/lib/python/ZPublisher/Publish.py, line 187, in publish File /var/zope/Zope-2.3-ebok/lib/python/ZPublisher/Publish.py, line 171, in publish File /var/zope/Zope-2.3-ebok/lib/python/ZPublisher/mapply.py, line 160, in mapply (Object: re_replace) File /var/zope/Zope-2.3-ebok/lib/python/ZPublisher/Publish.py, line 112, in call_object (Object: re_replace) File /var/zope/Zope-2.3-ebok/lib/python/Shared/DC/Scripts/Bindings.py, line 324, in __call__ (Object: re_replace) File /var/zope/Zope-2.3-ebok/lib/python/Shared/DC/Scripts/Bindings.py, line 354, in _bindAndExec (Object: re_replace) File /var/zope/Zope-2.3-ebok/lib/python/Products/PythonScripts/PythonScript.py, line 336, in _exec (Object: re_replace) (Info: ({'script': <PythonScript instance at 8a2caa8>, 'context': <Folder instance at 8bdbf98>, 'container': <Folder instance at 8bdbf98>, 'traverse_subpath': []}, ('hjkh', 'hkjh', '<[^>]*>'), {}, ('<[^>]*>',))) File Script (Python), line 5, in re_replace File /var/zope/Zope-2.3-ebok/lib/python/Products/PythonScripts/Guarded.py, line 273, in __getattr__ File /var/zope/Zope-2.3-ebok/lib/python/Products/PythonScripts/Guarded.py, line 150, in __careful_getattr__ (Object: re) File /var/zope/Zope-2.3-ebok/lib/python/AccessControl/SecurityManager.py, line 144, in validate File /var/zope/Zope-2.3-ebok/lib/python/AccessControl/ZopeSecurityPolicy.py, line 168, in validate Unauthorized: split --- arnulf heimsbakk system analyst +47 76 14 45 42 spirea.net - http://spirea.net andøya rocket range - http://www.rocketrange.no
On Tue, 31 Jul 2001, Arnulf Heimsbakk wrote:
I'm trying to use a regular expression in python-script. It gives me an unauthorized error every time I try to run it. Saving the script works without errors. What do I do wrong..?!!
Regular expressions cannot be used in Python Scripts because of security problems. It's very easy to write a regular expression that uses all of the memory on your computer, or that goes into a near-infinite loop. Since PythonScripts are designed to be written by average content designers, this would give them the power to take down your site. IIRC, you can add modules to /lib/python/Products/PythonScripts/standard.py and then they can be made available to Python Scripts. I'd take the security warning to heart, though, unless you trust all of your managers. -- Joel Burton <jburton@scw.org> Director of Information Systems, Support Center of Washington
participants (2)
-
Arnulf Heimsbakk -
Joel Burton