- Collector #1593: fixed dumb _get_id() implementation in
        OFS.CopySupport that produced copy_of_copy_of....files

      - Collector #1450: files in utilities/ZODBTools are now installed
        during the installation process in the 'bin' directory

        to zope.conf to specific the maximum length of a HTTP request
        header before it is considered as a possible DoS attack and
        discarded.

      - Collector #1371: added new 'cgi-maxlen' directive to zope.conf 
        to limit the amount of form data being processed by Zope 
        to prevent DoS attacks

      - Collector #1407: changed WebDAV display name for objects
        to title_or_id() 

        hostnames instead of IP addresses only (patch by Dieter Maurer)

Use proper if REQUEST is not None everywhere.

debug mode and if the user is not Manager). This allows for better
debugging, while still keeping the possibility for a Manager to delete
buggy objects.

        for non-ascii characters.

Collector #1577: Fixed cryptic error message in ZPublisher if a non-ASCII string is passed to a date, int, long or float property.

web pages or HTTP headers.

servers.

MultiHook made the bogus assumption that hooks defined in classed would
use the same signature as hook functions added to instances. Well, they
*would*, but only after being transformed into bound methods. This means
that the before-publishing-traversal hook will have call signature
(container, request) as a function, but (self, container, request) as a
method, with self==container.

  "javascript" as editable through the File edit form, just like
  text/<foo> types

I thought I had merged this before but clearly not :-(
Also fixed a deprecation warning in testZopePageTemplate.py.

  return correctly formatted ISO 8601-representations to augment
  the ISO method which isn't compliant with ISO 8601.

  Statistics view in the ZMI

No commit message

        could fail due to a broken "echo" implementation causing the 
        creation of a borked version.txt file.

- show warning only if 'title' is removable
- use 'form-element' class for textarea

split into small chunks even when initialized from a string.

      - Added a ZConfig directive 'large-file-threshold' to control
        the request content-size threshold at which a temporary file
        gets created. Use the same value for deciding between reading
        the whole request in memory or just a chunk inside
        webdav.NullResource.PUT().

      - Stitch newly-created object into it's container *before*
        calling it's PUT() method. This fixes an issue with
        OFS.File/OFS.Image that would result into reading the whole
        file in memory and wrapping it into a *single* Pdata object.

      - Import ZServer.CONNECTION_LIMIT variable *inside* the method
        that uses it. Before this, the variable was imported at the
        module level, thus binding it too early which would cause the
        ZConfig handler to have no real effect.

      - Catch AttributeErrors and KeyErrors raised from
        __bobo_traverse__ and convert them to NotFound. In debug mode
        a more verbose error message is issued, the same way it's done
        on attribute/item traversal.

      - Merged /Zope/branches/dc-bobo_traverse-branch 27744:28328

      - Don't escape properties stored as XML (ie: having a
        __xml_attrs__ metadata set by PROPPATCH) when building a
        PROPFIND response.

      - If a PROPPATCH element value contains only a CDATA section,
        store the CDATA contents only.

      - Always unescape element contents on webdav.xmltools

      - Use saxutils to escape/unescape values for/from
        PROPFIND/PROPPATCH.

      - Make OFS.PropertySheet use the escaping function from
        webdav.xmltools.

      - Escape/unescape " and '

      - Set a default value of '' for the new 'alt' property as not to
        break existing content.