Hanno Schlichting schrieb:
Alec Mitchell wrote:
On 9/13/06, Raphael Ritz
<[EMAIL PROTECTED]> wrote:
that's what I meant by saying earlier that PIL isn't necessarily
trivial to install. But anyway, I consider my original question
answered: it wasn't introduced on purpose in the first place but
now that a security-related issue depends on it anyway (the
portrait checking) people are willing to accept this.
When I introduced the dependency for the portrait fix in 2.5 and 2.1
it was fully intentional.
Yep, Raphael was talking about my introduction of the dependency in the
CMF 2.1 branches which was not intentional (that's the first place) and
of your introduction as the 'security related issue'.
thanks for the exegesis Hanno ;-)
Raphael
Hanno
_______________________________________________
Framework-Team mailing list
Framework-Team@lists.plone.org
http://lists.plone.org/mailman/listinfo/framework-team
