[Zope-dev] Suggestion for small(?) change in BaseRequest.py.
Security effects?
Dieter Maurer
dieter at handshake.de
Fri Sep 3 14:04:18 EDT 2004
Lennart Regebro wrote at 2004-9-3 12:05 +0200:
> ...
>Dieter Maurer wrote:
>> If the traversal made any changes to persistent state, then
>> these changes are committed rather than aborted.
>>
>> Usually, traversal should not change the persistent state -- but...
>
>Would the transaction.abort() addition suggested by Tino be enough to
>solve that?
Yes.
--
Dieter
More information about the Zope-Dev
mailing list