[Zope] DTML, Zope and Regex

Paul Winkler pw_lists@slinkp.com
Wed, 10 Jul 2002 14:16:57 -0400


On Wed, Jul 10, 2002 at 01:58:39PM -0400, Jorge O. Martinez wrote:
> >For one thing, they live on the filesystem. If somebody has read/write 
> >access
> >to your filesystem, you have much bigger problems than what th
> >can do to your external methods. e.g. rm -f var/Data.fs.
> 
> I understand your concern with a situation like the above, but that is not 
> exactly what I had in mind, I was thinking about matching/replacing 
> strings, and take actions based on matches, not executing commands at the 
> system level.

I know that. I was responding to the mistaken assertion that external
methods have no security at all. They have much more security than
python scripts.

-- 

Paul Winkler
home:  http://www.slinkp.com
"Muppet Labs, where the future is made - today!"