[prev in list] [next in list] [prev in thread] [next in thread] 

List:       zope
Subject:    Re: [Zope] loading an url from a restricted python script
From:       Andrew Milton <akm () theinternet ! com ! au>
Date:       2005-06-29 6:22:17
Message-ID: 20050629062217.GB81793 () camelot ! theinternet ! com ! au
[Download RAW message or body]

+-------[ Andreas Jung ]----------------------
| 
| 
| --On 28. Juni 2005 20:40:56 +0200 santiago <chetzacoalt@free.fr> wrote:
| 
| >I don't understand still :
| >what I am looking for is a way to read a url whitout having to
| >write an external method.
| >the point is I belived that reading a url in a web application like zope
| >should not require such powerfull tool as external methods or dedicated
| >products..
| 
| You *have* to write an external method. dot. point.

As some background to why this is so;

urrlib can read files from your filesystem, and then send them to anywhere on
the internet. Do you really want to allow that by default to anyone that has
access to scripting on your server?

-- 
Andrew Milton
akm@theinternet.com.au
_______________________________________________
Zope maillist  -  Zope@zope.org
http://mail.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
 http://mail.zope.org/mailman/listinfo/zope-announce
 http://mail.zope.org/mailman/listinfo/zope-dev )
[prev in list] [next in list] [prev in thread] [next in thread]