[ZPT] Re: Use-cases for strictinsert=True?
Florent Guillaume
fg at nuxeo.com
Wed Sep 21 14:02:13 EDT 2005
Thomas Lotze wrote:
> Tonico Strasser wrote:
>
>
>>Just for my understanding: would it be possible to dynamically create
>>macros with strictinsert=True?:
>
>
> It means that if <div tal:content="structure foo/bar" /> is interpreted
> with strictinsert=True on the TALInterpreter used, foo/bar had better
> resolve to something well-formed.
If that was the only behavior, it would be a mildly interesting feature for
some use cases, but...
>><div
>> tal:repeat="name python: ('foo', 'bar', 'baz')" tal:replace="structure
>> string:<div metal:define-macro='$name'/>" />
this is definitely something we DON'T want, a potential security hole and
useless feature.
+1 on removing strictinsert.
Florent
--
Florent Guillaume, Nuxeo (Paris, France) CTO, Director of R&D
+33 1 40 33 71 59 http://nuxeo.com fg at nuxeo.com
More information about the ZPT
mailing list