[Zope] <code> tag?

Mike Winter mfw127@cs.usask.ca
Thu, 2 Sep 1999 10:27:14 -0600 (CST)


On Sun, 29 Aug 1999, Martijn Pieters wrote:

>At 02:03 29-8-99 , Mike Winter wrote:
>>Hi, just a quick question: how do you get Zope to display DTML without
>>evaluating it?
>
>There are two methods, one of which is (to me) a very serious security 
>breach: document_src (for which you need the View management screens 
>permission), and PrincipiaSearchSource, for which you do not need any 
>permissions at all. At any Zope2 site, I can add /PrincipiaSearchSource to 
>the URL and see the source of that DTML Method/Document.
>

Thanks for the help, everyone.
--
Mike Winter | mfw127@mail.usask.ca 
U. of S: 966-4759 TR Labs: 668-9323