[Zope3-Users] Zope 3 as WSGI app using mod_python

2006-07-08 Thread Achim Domma
Hi, I'm interested in running Zope 3 via mod_python as WSGI app directly in apache. I like the idea to configure different instances simply in my apache config and don't have to setup different running zope instances. The "official" docs do not say much about this option, but there is a WSGI

[Zope3-Users] Security alert: use of Through-the-Web reStructuredText

2006-07-08 Thread Jim Fulton
Recently, a serious security flaw was found in Zope 2 due to it's improper support for allowing reStructuredText to be edited through- the-web. reStructuredText has directives that allow inclusion of any file a Zope process could read and inclusion of data obtained from fetching arbitrary U

Re: [Zope3-Users] Security alert: use of Through-the-Web reStructuredText

2006-07-08 Thread David Pratt
Jim Fulton wrote: Recently, a serious security flaw was found in Zope 2 due to it's improper support for allowing reStructuredText to be edited through-the-web. reStructuredText has directives that allow inclusion of any file a Zope process could read and inclusion of data obtained from fetc

Re: [Zope3-Users] Security alert: use of Through-the-Web reStructuredText

2006-07-08 Thread Jim Fulton
On Jul 8, 2006, at 11:49 AM, David Pratt wrote: Jim Fulton wrote: Recently, a serious security flaw was found in Zope 2 due to it's improper support for allowing reStructuredText to be edited through-the-web. reStructuredText has directives that allow inclusion of any file a Zope proces