Zope allows object ID with a trailing space character

[Mike Rhodes]

Zope allows a trailing space to be used for object names. In particular, this allows you to create URLs which are very difficult to share as auto-hyperlinking will discard the trailing space. It's also almost impossible to transcribe them.

[Richard Mitchell (mitchellrj)]

It's also worth noting that OFS.ObjectManager.check_id also permits trailing hash (pound, #) characters, which could limit their linkability, as many uses (such as OFS.Traversable.absolute_url) would not convert to percent-encoded URLs for correct access.

[Colin Watson (cjwatson)]

The zope2 project on Launchpad has been archived at the request of the Zope developers (see https://answers.launchpad.net/launchpad/+question/683589 and https://answers.launchpad.net/launchpad/+question/685285). If this bug is still relevant, please refile it at https://github.com/zopefoundation/zope2.