[Zope3-dev] Re: Through-the-web reStructuredText
Michael Haubenwallner
michael at d2m.at
Fri Jul 7 18:18:10 EDT 2006
Tres Seaver wrote:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
> Jim Fulton wrote:
>
>> Zope 3, as releases is not affected by the security hole that
>> has plagued Zope 2, however, Michael Haubenwallner has pointed
>> out that some add-on-products, such as zwiki and bugtracker, may
>> provide TTW reST.
>
> They appear to be "safe" for the moment, but not because they
> intentionally disable file inclusion: rather, they have a bug (they set
> the 'encoding' to 'unicode', which then causes an exception).
>
Both restructuredText directives 'include' and 'raw' have an 'encoding'
option to set the name of text encoding of the external data file/raw
data (file or URL), it defaults to the document's encoding (if specified).
.. include:: filename.ext
:encoding: utf-8
.. raw:: html
:file: filename.ext
:encoding: utf-8
should work as expected
Michael
--
http://zope.org/Members/d2m
http://planetzope.org
More information about the Zope3-dev
mailing list