[Zope3-Users] Problem with z3c.form security when rendering error

[Yuan HOng]
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