[Zope] seeing every name in the current dtml namespace

[Marcus Collins]

Hi,

It looks like I was a little off-base there...

From CHANGES.TXT:

Zope 2.1.4

      Bugs Fixed 

        - Removed the "feature" that allowed the REQUEST object to be
          traversed through the web. While useful for debugging, this 
          could be a security issue.

-- Marcus

> -----Original Message-----
> From: Daryl Tester [mailto:dt@picknowl.com.au]
> Sent: 07 April 2000 09:51
> To: zope@zope.org
> Subject: Re: [Zope] seeing every name in the current dtml namespace
> 
> 
> Marcus Collins wrote:
> 
> > Older versions of Zope (pre-2.1.2, IIRC)
> > allowed you to view the REQUEST object of a document/method 
> by appending
> > REQUEST to its URL: http://path/to/some/object/REQUEST.
> 
> I've seen this comment several times now, and have been puzzled by
> it before.  This appending of /REQUEST to the URL works on my 2.1.4
> development platform (installed from Jeff Rush's RPMs, having never
> seen another version of Zope on this box).  What gives?
> 
> 
> Regards,
>   Daryl Tester
> 
> _______________________________________________
> Zope maillist  -  Zope@zope.org
> http://lists.zope.org/mailman/listinfo/zope
> **   No cross posts or HTML encoding!  **
> (Related lists - 
>  http://lists.zope.org/mailman/listinfo/zope-announce
>  http://lists.zope.org/mailman/listinfo/zope-dev )
>