[Zope-Checkins] CVS: Zope/doc - CHANGES.txt:1.535.2.157

[Tres Seaver]

Update of /cvs-repository/Zope/doc
In directory cvs.zope.org:/tmp/cvs-serv2462/doc

Modified Files:
      Tag: Zope-2_6-branch
	CHANGES.txt 
Log Message:


  - The dtml-tree tag used an "eval" of user-supplied data; its 
    efforts to prevent abuse were ineffective.


=== Zope/doc/CHANGES.txt 1.535.2.156 => 1.535.2.157 ===
--- Zope/doc/CHANGES.txt:1.535.2.156	Thu Jan  8 15:38:15 2004
+++ Zope/doc/CHANGES.txt	Thu Jan  8 15:42:02 2004
@@ -8,6 +8,9 @@
 
     Bugs Fixed
 
+     - The dtml-tree tag used an "eval" of user-supplied data; its 
+       efforts to prevent abuse were ineffective.
+
      - XML-RPC marshalling of class instances used the instance 
        __dict__ to marshal the object, and could include attributes 
        prefixed with an underscore name. These attributes are considered