[Zope-dev] urllib not available in Python Scripts?

[Itai Tavor]

Evan Simpson wrote:

>From: Itai Tavor <itai@optusnet.com.au>
>>  In Python Methods I could do urllib.quote(...). This doesn't work in
>>  Python Scripts. Is quote considered a security risk?
>
>No, but only the modules available to DTML are importable by default.   You
>would need to provide security declarations in order to import anything from
>urllib.

I seem to be practicing FUD on myself...

The reason I could do urllib.quote in Python Methods was that I 
implemented the MoreBuiltins trick someone described here a while 
ago. It added a bunch of modules to TemplateDict, making them 
available to Python Methods. That was a set-and-forget kind of thing, 
so I forgot it :-)

So the questions I should have asked are: 1) Why can't we have urllib 
in Python Scripts - and you answered that, and 2) Why doesn't the 
MoreBuiltins trick work with Python Scripts? The new Guarded.py seems 
to only pick selected modules from TemplateDict, so the extra modules 
are ignored.

Is there anything that can be done so that adding modules continues 
to work? I don't understand what you mean by providing security 
declarations - that doesn't sound like something I can do myself - 
without hacking the Python Scripts code, that is.

Itai
-- 
Itai Tavor                    "Je sautille, donc je suis."
C3Works    itai@c3works.com              - Kermit the Frog

"If you haven't got your health, you haven't got anything"