[Zope-dev] Suggestion for small(?) change in BaseRequest.py. Security effects?

Dieter Maurer dieter at handshake.de
Fri Sep 3 14:04:18 EDT 2004


Lennart Regebro wrote at 2004-9-3 12:05 +0200:
> ...
>Dieter Maurer wrote:
>> If the traversal made any changes to persistent state, then
>> these changes are committed rather than aborted.
>> 
>> Usually, traversal should not change the persistent state -- but...
>
>Would the transaction.abort() addition suggested by Tino be enough to 
>solve that?

Yes.

-- 
Dieter


More information about the Zope-Dev mailing list