This has been fixed in trunk. Anthony pointed it out to me one week
ago.

On Jul 6, 12:20 am, GoldenTiger <goldenboy...@gmail.com> wrote:
> I referred to generic views by default, 
> likehttp://web2py.com/examples/simple_examples/hello6
> and discussed recently here
>
> Invalid view in 
> 1.97.1:https://groups.google.com/group/web2py/browse_thread/thread/c3a14f5ee...
>
> I agree the security issue, in fact I have thought so since ever, but
> in my opinion, It has not been taken on mind some cases affected by
> this change
>
> On 6 jul, 03:09, Anthony <abasta...@gmail.com> wrote:
>
>
>
>
>
>
>
> > On Tuesday, July 5, 2011 8:38:07 PM UTC-4, GoldenTiger wrote:
>
> > > These last days, I have been reported by various customers about a lot
> > > of broken webapps.
> > >  I have to dedicate next days to review all these webs to patch  ,
> > > which I barely  remember how I did.
>
> > > So, this unexpected compatibility change, also it's an unexpected mail
> > > from an old customer.
>
> > What is the "compatibility change"? Is it the fact that the 'vars' argument
> > to LOAD is no longer ignored (and instead replaced with request.vars) when
> > ajax=False? Or is there something else that has changed?
>
> > Anthony

Reply via email to