[Zope] Remove/Ignore <P> and other HTML tags

Dieter Maurer dieter at handshake.de
Fri Sep 15 14:02:17 EDT 2006


Zhi-Wei Lu wrote at 2006-9-14 15:52 -0700:
> ...
>The above code work fine for the 2.7.4 server, but fails for 2.9.4  
>server, it will
>ask for authentication password for 2.9.4, no user/password combination
>will work.

This means that you see a security problem.

You analyse security problems by means of "verbose-security".

Look into your Zope configuration file (by default "etc/zope.conf").
Search "verbose-security" and follow the advice in the corresponding comment.



-- 
Dieter


More information about the Zope mailing list