[Zope-dev] Import restriction?

Tres Seaver tseaver@palladion.com
Wed, 12 Apr 2000 10:39:11 -0500


mindlace <mindlace@imeme.net>

> I'm curious as to why "Import" is limited to the local file-system.
> Would I be committing some sort of serious security error if I allowed
> users to upload their own exported folders, etc, through that interface?

I just rejected a patch which allowed through-the-web import. See

  http://classic.zope.org:8080/Collector/894/view

for a discussion of the security issues.

Tres.
-- 
=========================================================
Tres Seaver  tseaver@digicool.com   tseaver@palladion.com