[Zope] loading an url from a restricted python script

Andrew Milton akm at theinternet.com.au
Wed Jun 29 02:22:17 EDT 2005


+-------[ Andreas Jung ]----------------------
| 
| 
| --On 28. Juni 2005 20:40:56 +0200 santiago <chetzacoalt at free.fr> wrote:
| 
| >I don't understand still :
| >what I am looking for is a way to read a url whitout having to
| >write an external method.
| >the point is I belived that reading a url in a web application like zope
| >should not require such powerfull tool as external methods or dedicated
| >products..
| 
| You *have* to write an external method. dot. point.

As some background to why this is so;

urrlib can read files from your filesystem, and then send them to anywhere on
the internet. Do you really want to allow that by default to anyone that has
access to scripting on your server?

-- 
Andrew Milton
akm at theinternet.com.au


More information about the Zope mailing list