[Zope-Checkins] CVS: Zope2 - HTTPRequest.py:1.43.2.5

Brian Lloyd brian@digiciool.com
Mon, 12 Mar 2001 16:26:03 -0500 (EST)


Update of /cvs-repository/Zope2/lib/python/ZPublisher
In directory korak:/home/brian/temp/zope-23-branch/lib/python/ZPublisher

Modified Files:
      Tag: zope-2_3-branch
	HTTPRequest.py 
Log Message:
Added security assertion to headers member of FileUpload



--- Updated File HTTPRequest.py in package Zope2 --
--- HTTPRequest.py	2001/03/01 15:03:34	1.43.2.4
+++ HTTPRequest.py	2001/03/12 21:26:02	1.43.2.5
@@ -1016,7 +1016,12 @@
 
         self.headers=aFieldStorage.headers
         self.filename=aFieldStorage.filename
-    
+
+        # Add an assertion to the rfc822.Message object that implements
+        # self.headers so that managed code can access them.
+        try:    self.headers.__allow_access_to_unprotected_subobjects__ = 1
+        except: pass
+
 
 parse_cookie_lock=allocate_lock()
 def parse_cookie(text,