[Zope-Checkins] SVN: Zope/trunk/ - reStructuredText/ZReST: setting raw_enabled to 0 for security

[Andreas Jung]

Log message for revision 68976:
        - reStructuredText/ZReST: setting raw_enabled to 0 for security
          reasons
  

Changed:
  U   Zope/trunk/doc/CHANGES.txt
  U   Zope/trunk/lib/python/Products/ZReST/ZReST.py
  U   Zope/trunk/lib/python/reStructuredText/__init__.py

-=-
Modified: Zope/trunk/doc/CHANGES.txt
===================================================================
--- Zope/trunk/doc/CHANGES.txt	2006-07-05 14:53:31 UTC (rev 68975)
+++ Zope/trunk/doc/CHANGES.txt	2006-07-05 16:08:23 UTC (rev 68976)
@@ -27,6 +27,9 @@
 
     Bugs Fixed
 
+      - reStructuredText/ZReST: setting raw_enabled to 0 for security
+        reasons
+
       - Collector #2113: 'zopectl test' masked Ctrl-C.
 
       - OFS Image: Image and File updated to use isinstance(data, str)

Modified: Zope/trunk/lib/python/Products/ZReST/ZReST.py
===================================================================
--- Zope/trunk/lib/python/Products/ZReST/ZReST.py	2006-07-05 14:53:31 UTC (rev 68975)
+++ Zope/trunk/lib/python/Products/ZReST/ZReST.py	2006-07-05 16:08:23 UTC (rev 68976)
@@ -203,6 +203,7 @@
                 'stylesheet' : self.stylesheet,
                 'stylesheet_path' : None,
                 'pub.settings.warning_stream' :  Warnings(),
+                'raw_enabled' : 0,
                 'file_insertion_enabled' : 0,
                 }
 

Modified: Zope/trunk/lib/python/reStructuredText/__init__.py
===================================================================
--- Zope/trunk/lib/python/reStructuredText/__init__.py	2006-07-05 14:53:31 UTC (rev 68975)
+++ Zope/trunk/lib/python/reStructuredText/__init__.py	2006-07-05 16:08:23 UTC (rev 68976)
@@ -73,6 +73,7 @@
     settings['stylesheet'] = stylesheet
     settings['stylesheet_path'] = None
     settings['file_insertion_enabled'] = 0
+    settings['raw_enabled'] = 0
     if language_code:
         settings['language_code'] = language_code
     settings['language_code'] = language_code