[Zope] seeing every name in the current dtml namespace
Daryl Tester
dt@picknowl.com.au
Fri, 07 Apr 2000 18:36:26 +0930
Marcus Collins wrote:
> It looks like I was a little off-base there...
>
> From CHANGES.TXT:
>
> Zope 2.1.4
>
> Bugs Fixed
>
> - Removed the "feature" that allowed the REQUEST object to be
> traversed through the web. While useful for debugging, this
> could be a security issue.
Yet I'm still managing this for 2.1.4. I though it might have
been some interaction between Apache and Zope, but I still manage
to do http://localhost:8080/QuickStart/REQUEST and have it render
the request. Odd and puzzling.
Regards,
Daryl Tester