[Zope-dev] Import restriction?
Tres Seaver
tseaver@palladion.com
Wed, 12 Apr 2000 10:39:11 -0500
mindlace <mindlace@imeme.net>
> I'm curious as to why "Import" is limited to the local file-system.
> Would I be committing some sort of serious security error if I allowed
> users to upload their own exported folders, etc, through that interface?
I just rejected a patch which allowed through-the-web import. See
http://classic.zope.org:8080/Collector/894/view
for a discussion of the security issues.
Tres.
--
=========================================================
Tres Seaver tseaver@digicool.com tseaver@palladion.com