[z3-five] Re: [z3-checkins] r5852 - in z3/Five/trunk: . demo/FiveViewsDemo tests tests/products/FiveTest

[Martijn Faassen]

dreamcatcher at codespeak.net wrote:

[snip lots of great looking stuff]
> - ViewPageTemplateFile 'modules' uses zope2 SecureModuleImporter now
>   (eg: browser:page)

I'm a bit worried about this one. Aren't we dragging too much of Zope 
page template security in here? After all, Five ZPTs are trusted, so 
shouldn't we be able to import what we want?

I'm worried about introducing into Five lots of the cursing developers 
typically do when messing around with security in Zope 2 untrusted code..

Regards,

Martijn