[z3-five] Re: [Zope3-checkins] SVN: Zope3/trunk/src/zope/app/p Start to distinguish between trusted and untrusted page templates.

[Martijn Faassen]

Fred L. Drake, Jr. wrote:
> Log message for revision 26642:
>   Start to distinguish between trusted and untrusted page templates.
>   
>   This is done by using two separate TALES engines for the trusted and
>   untrusted templates.  These are provded by two mix-in base classes,
>   TrustedAppPT and AppPT.
>   
>   Page templates loaded from the filesystem (derived from PageTemplateFile)
>   are trusted; templates stored in the database are not.

I just saw this Zope 3 checkin message to the trunk (made last week). 
This looks like something we could use. I don't know whether this will 
be merged with X3 but even if not we can steal the code for Five; we 
basically want all our page templates to be trusted.

Regards,

Martijn