[Zope-Checkins] CVS: Zope/doc - CHANGES.txt:1.406.2.68 ENVIRONMENT.txt:1.8.16.2
Martijn Pieters
mj@zope.com
Mon, 19 Aug 2002 10:56:08 -0400
Update of /cvs-repository/Zope/doc
In directory cvs.zope.org:/tmp/cvs-serv26710/doc
Modified Files:
Tag: Zope-2_5-branch
CHANGES.txt ENVIRONMENT.txt
Log Message:
Disable autoquoting by default, allow enabelinbg with an environment
variable. Only for Zope 2.5, in 2.6 auto quoting will remain enabled by
default.
=== Zope/doc/CHANGES.txt 1.406.2.67 => 1.406.2.68 ===
--- Zope/doc/CHANGES.txt:1.406.2.67 Mon Aug 19 09:45:05 2002
+++ Zope/doc/CHANGES.txt Mon Aug 19 10:56:07 2002
@@ -9,12 +9,13 @@
New Features
- - <dtml-var name> and &dtml.-name; will now automatically HTML-quote
+ - <dtml-var name> and &dtml.-name; can now automatically HTML-quote
unsafe data taken implictly from the REQUEST object. Data taken
explicitly from the REQUEST object is not affected, as well as any
- other data not originating from REQUEST. This can be disabled (at
- your own risk!) by setting the environment variable
- ZOPE_DTML_REQUEST_AUTOQUOTE to one of 'no', '0', or 'disabled'.
+ other data not originating from REQUEST. This can be enabled (highly
+ recommended!) by setting the environment variable
+ ZOPE_DTML_REQUEST_AUTOQUOTE to one of 'yes, '1', or 'enabled'. THis
+ functionality will be enabled by default in Zope 2.6.
- Collector #61 -- now manage_PasteObjects return a list of dictionaries
containing {'id':original_id,'new_id':newly_pasted_obj_id} when called
=== Zope/doc/ENVIRONMENT.txt 1.8.16.1 => 1.8.16.2 ===
--- Zope/doc/ENVIRONMENT.txt:1.8.16.1 Mon Aug 12 10:43:02 2002
+++ Zope/doc/ENVIRONMENT.txt Mon Aug 19 10:56:07 2002
@@ -220,13 +220,14 @@
ZOPE_DTML_REQUEST_AUTOQUOTE
- Set this variable to one of 'no', '0' or 'disabled' to disable
+ Set this variable to one of 'yes, '1' or 'enabled' to enable
autoquoting of implicitly retrieved REQUEST data that contain a '<'
- when used in a dtml-var construction. When *not* set to one of these
- values, all data implicitly taken from the REQUEST (as oposed to
- addressing REQUEST.varname directly), that contain a '<', will be
- HTML quoted when interpolated with a <dtml-var> or &dtml-;
- construct.
+ when used in a dtml-var construction. When set, all data implicitly
+ taken from the REQUEST (as opposed to addressing REQUEST.varname
+ directly), that contain a '<', will be HTML quoted when interpolated
+ with a <dtml-var> or &dtml-; construct. Enableing this is highly
+ recommended! This functionality will be enabled by default in Zope
+ 2.6.
Esoteric