Commits · b26e453be9e52831e6dd05c6b037c66ac8772d9b · Kirill Smelkov / Zope

05 Jul, 2013 5 commits
- Prevent sandbox escape via 'BaseRequest.traverseName'. · b26e453b
  Tres Seaver authored Jul 05, 2013
```
Fixes LP #1095343.
```
  b26e453b
- Prevent arbitrary redirections via faked "CANCEL" buttons. · 578139ba
  Tres Seaver authored Jul 05, 2013
```
Fixes LP #1094144.
```
  578139ba
- Add permissions to some unprotected methods of 'OFS.ObjectManager' · b249b0dd
  Tres Seaver authored Jul 05, 2013
```
Fixes LP #1094221.
```
  b249b0dd
- Prevent zlib-based DoS when parsing the cookie containing paste tokens. · 9f37c696
  Tres Seaver authored Jul 05, 2013
```
Fixes LP #1094049.
```
  9f37c696
- Ignore derived. · ba2292bb
  Tres Seaver authored Jul 05, 2013
  
  ba2292bb
04 Jul, 2013 1 commit
- Ignore derived. · 4f0e008b
  Tres Seaver authored Jul 04, 2013
  
  4f0e008b
01 May, 2013 2 commits
- vb · 32d84a23
  Hanno Schlichting authored May 01, 2013
  
  32d84a23
- prepare · 1ef6dc22
  Hanno Schlichting authored May 01, 2013
  
  1ef6dc22
26 Feb, 2013 2 commits
- add ignores · a4e95a7b
  Hanno Schlichting authored Feb 26, 2013
  
  a4e95a7b
- add C header dependencies · e7a150a9
  Hanno Schlichting authored Feb 26, 2013
  
  e7a150a9
20 Feb, 2013 4 commits
- Defend against minidom-based DoS in webdav. · 25ae42be
  Tres Seaver authored Feb 20, 2013
```
Patch from Christian Heimes.

Addresses LP #1114688.
```
  25ae42be
- Protect views of ZPT source with 'View Management Screens' permision. · c12ebd20
  Tres Seaver authored Feb 20, 2013
```
Fixes LP #978980.
```
  c12ebd20
- Add coverage for Products.PageTemplates.ZopePageTemplate:Src. · 3c92e1f6
  Tres Seaver authored Feb 20, 2013
  
  3c92e1f6
- Wrap long line. · 3a488b5b
  Tres Seaver authored Feb 20, 2013
  
  3a488b5b
15 Nov, 2012 1 commit
- Note new (historical) LP bug for old fix. · 698ee0d1
  Tres Seaver authored Nov 15, 2012
  
  698ee0d1
31 Oct, 2012 2 commits
- vb · 9c6f2c17
  Hanno Schlichting authored Oct 31, 2012
  
  9c6f2c17
- LP #1071067: Use a stronger random number generator and a constant time comparison function. · 7f46f181
  Hanno Schlichting authored Oct 31, 2012
  
  7f46f181
14 Oct, 2012 1 commit
- LP #930812: Scrub headers a bit more. · 485c4b74
  Hanno Schlichting authored Oct 14, 2012
  
  485c4b74
18 Sep, 2012 2 commits
- vb · f911fe83
  Hanno Schlichting authored Sep 18, 2012
  
  f911fe83
- prepare · 6dd8585c
  Hanno Schlichting authored Sep 18, 2012
  
  6dd8585c
13 Sep, 2012 2 commits
- Typo. · 67b893be
  Tres Seaver authored Sep 13, 2012
  
  67b893be
- Explicitly declared ZTUtils APIs as public · bee7e0fb
  Tres Seaver authored Sep 13, 2012
```
Repairs breakages in apps following fix for LP #1047318.
```
  bee7e0fb
09 Sep, 2012 2 commits
- vb · 676d4fba
  Hanno Schlichting authored Sep 09, 2012
  
  676d4fba
- LP #1047318: Tighten import restrictions for restricted code. · 1502dc3c
  Hanno Schlichting authored Sep 09, 2012
  
  1502dc3c
23 Aug, 2012 1 commit
- Backport `rolesForPermissionOn` fix from standalone AccessControl project · a3639de7
  Hanno Schlichting authored Aug 23, 2012
  
  a3639de7
22 Jun, 2012 1 commit
- updated to zdaemon = 2.0.7 · 12632a55
  Hanno Schlichting authored Jun 22, 2012
  
  12632a55
23 May, 2012 1 commit
- Bump zope.tales to 3.4.1. · 196e1404
  Tres Seaver authored May 23, 2012
  
  196e1404
11 Mar, 2012 2 commits
- Backport r124566 from the trunk. · e30a7a0d
  Tres Seaver authored Mar 11, 2012
  
  e30a7a0d
- Backport r124565 from the trunk. · 6423b766
  Tres Seaver authored Mar 11, 2012
  
  6423b766
20 Feb, 2012 2 commits
- vb · c54272c0
  Hanno Schlichting authored Feb 20, 2012
  
  c54272c0
- Prepare Zope2 2.12.23. · ba8a2de7
  Hanno Schlichting authored Feb 20, 2012
  
  ba8a2de7
14 Feb, 2012 1 commit

Make ObjectManager's ``get`` and ``__getitem__`` return only "items". · e227aa0d

Tres Seaver authored Feb 14, 2012

No longer return attributes / methods from the class or from acquisition.
Thanks to Richard Mitchell at Netsight for the report.

e227aa0d

09 Feb, 2012 5 commits
- Remove other pointless tests of Python's instance attr semantics. · 0782e41c
  Tres Seaver authored Feb 09, 2012
  
  0782e41c
- Add tests for misses in 'get'. · 3bad42ba
  Tres Seaver authored Feb 09, 2012
  
  3bad42ba
- Remove pointless test of Python's instance attr semantics. · 769bb443
  Tres Seaver authored Feb 09, 2012
  
  769bb443
- Test non-replacement of methods with other '_setObject' assertions. · a5830619
  Tres Seaver authored Feb 09, 2012
  
  a5830619
- Wrap long lines. · c2ce4798
  Tres Seaver authored Feb 09, 2012
  
  c2ce4798
06 Feb, 2012 3 commits
- Add end-of-life notice · 9c262db0
  Hanno Schlichting authored Feb 06, 2012
  
  9c262db0
- update to latest bugfix releases · ec309b9f
  Hanno Schlichting authored Feb 06, 2012
  
  ec309b9f
- - fixed ZPL version · 030e204d
  authored Feb 06, 2012
  
  030e204d