[Zope-Checkins] CVS: Zope/lib/python/Products/Transience/dtml - manageTransientObjectContainer.dtml:1.9

[Florent Guillaume]

Update of /cvs-repository/Zope/lib/python/Products/Transience/dtml
In directory cvs.zope.org:/tmp/cvs-serv14380/lib/python/Products/Transience/dtml

Modified Files:
	manageTransientObjectContainer.dtml 
Log Message:
Merged efge-death-to-dtml-var-branch into HEAD:

Removed most <dtml-var> to replace them with &dtml-foo;.
This corrects a number of potential XSS holes, and simplifies
auditability of the remaining legitimate <dtml-var>.


=== Zope/lib/python/Products/Transience/dtml/manageTransientObjectContainer.dtml 1.8 => 1.9 ===
--- Zope/lib/python/Products/Transience/dtml/manageTransientObjectContainer.dtml:1.8	Wed Nov 21 17:46:36 2001
+++ Zope/lib/python/Products/Transience/dtml/manageTransientObjectContainer.dtml	Sun Dec 22 12:54:04 2002
@@ -19,7 +19,7 @@
 <dtml-let l=getLen>
 <dtml-if l>
   <dtml-if "l == 1">1 item is in this transient object container.
-  <dtml-else><dtml-var l> items are in this transient object container.
+  <dtml-else>&dtml-l; items are in this transient object container.
   </dtml-if>
 <dtml-else>
   There are no items in this transient object container.