[Zope] Security problem?

Chris Withers chrisw@nipltd.com
Thu, 07 Dec 2000 21:26:57 +0000


Might be a security problem...

Are you allowed to access that header from inside your index_html?

cheers,

Chris

Andreas Jung wrote:
> 
> Inside a product my index_html is set to
> 
>    "index_html=HTMLFile('index_html',globals())"
> 
> The index_html.dtml calls <dtml-var standard_html_header>. This DTML method is
> available in the top-level hierarchy. However When I call index_html Zope
> complains with a KeyError/standard_html_header.  When I remove the "<dtml-var
> standard_html_header>" call everything works fine.
> 
> Any idea why aquisition won't work in this case ?
> 
> Andreas
> 
> _______________________________________________
> Zope maillist  -  Zope@zope.org
> http://lists.zope.org/mailman/listinfo/zope
> **   No cross posts or HTML encoding!  **
> (Related lists -
>  http://lists.zope.org/mailman/listinfo/zope-announce
>  http://lists.zope.org/mailman/listinfo/zope-dev )