[Zope3-checkins] SVN: Zope3/trunk/src/zope/app/security/_protections.zcml The next() method was not allowed for any BTree iterator. This caused

[Stephan Richter]

Log message for revision 26045:
The next() method was not allowed for any BTree iterator. This caused 
a failure for any untrusted code trying to iterate over a btree-based 
container.

Fixes Bug 210.



-=-
Modified: Zope3/trunk/src/zope/app/security/_protections.zcml
===================================================================
--- Zope3/trunk/src/zope/app/security/_protections.zcml	2004-07-02 15:21:14 UTC (rev 26044)
+++ Zope3/trunk/src/zope/app/security/_protections.zcml	2004-07-02 16:21:46 UTC (rev 26045)
@@ -20,7 +20,7 @@
                       keys maxKey minKey" /> 
 </content>
 <content class="BTrees.IIBTree.IITreeIterator">
-   <allow attributes="__iter__ __str__ __getitem__ __len__ __contains__" /> 
+   <allow attributes="__iter__ __str__ __getitem__ __len__ __contains__ next" /> 
 </content>
 
 <!-- ===================================================================== -->
@@ -40,7 +40,7 @@
                       keys maxKey minKey" /> 
 </content>
 <content class="BTrees.IOBTree.IOTreeIterator">
-   <allow attributes="__iter__ __str__ __getitem__ __len__ __contains__" /> 
+   <allow attributes="__iter__ __str__ __getitem__ __len__ __contains__ next" /> 
 </content>
 
 <!-- ===================================================================== -->
@@ -60,7 +60,7 @@
                       keys maxKey minKey" /> 
 </content>
 <content class="BTrees.OIBTree.OITreeIterator">
-   <allow attributes="__iter__ __str__ __getitem__ __len__ __contains__" /> 
+   <allow attributes="__iter__ __str__ __getitem__ __len__ __contains__ next" /> 
 </content>
 
 <!-- ===================================================================== -->
@@ -80,7 +80,7 @@
                       keys maxKey minKey" /> 
 </content>
 <content class="BTrees.OOBTree.OOTreeIterator">
-   <allow attributes="__iter__ __str__ __getitem__ __len__ __contains__" /> 
+   <allow attributes="__iter__ __str__ __getitem__ __len__ __contains__ next" /> 
 </content>
 
 <!-- ===================================================================== -->