[ZDP] Distributed authoring test

[Michel Pelletier]

> -----Original Message-----
> From: Paul Everitt [mailto:Paul@digicool.com]
> Sent: Monday, May 24, 1999 7:39 AM
> To: Craig Allen; zdp@zope.org
> Subject: RE: [ZDP] Distributed authoring test
> 
> 
> 
> Craig wrote:
> > There is at least one problem that I see, and I thing it's a 
> > Zope issue. 
> > Contributions are created in pairs, a shell DTML Document 
> > that calls the actual
> > text that is stored in a companion DTML Method.  I did this 
> > for several reasons:
> >  - supporting the use of structured text if contributors 
> > wanted to use it; and
> >  - removing (translating using the 'html_quote' attribute) 
> > HTML tags so that
> > viewers can see what was written without their browser rendering it.
> > However, DTML is still rendered.  Is this a security risk?  
> > Do we need a new
> > attribute like 'DTML_quote' that would deactivate DTML tags?
> > Also, HTML tags in structured text contributions are 
> rendered, as the
> > 'html_quote' seems to break the use of stx.
> 
> Note that, for the portal toolkit demo, we created an "STX Document"
> object for Zope.  The standard_html_header and footer statements don't
> go in the body and the body is pure structured text.  However, when
> rendered, it is turned into HTML with the standard header and footer.
> This was done using Z Classes.
> 

Actually it gets better than that.  The STX Document has two views, the
content view and the format view.  The format view is for your DTML that
renders the content view, so it's like a blend of DTML Documents and
Methods.  It's content behaves like a Document, and it's formatter
behaves like a method.

-Michel


> --Paul
> 
> _______________________________________________
> ZDP maillist  -  ZDP@zope.org
> http://www.zope.org/mailman/listinfo/zdp
>