zope3 lacks security declaration for StringIO.StringIO

[Guilherme Salgado]

We need this declaration, otherwise we can't make any use of security-proxied objects of this type

For now, this declaration will be in launchpad/webapp/bug-5133.zcml. Please remove it when this bug is fixed.

[Stuart Bishop (stub)]

Guilherme Salgado wrote:
> Public bug report changed:
> https://launchpad.net/malone/bugs/5133
>
> Changed in: Launchpad (upstream)
> Assignee: (unassigned) => Stuart Bishop

Hmm... Zope3 doesn't use cStringIO because it isn't Unicode aware. Are you
using it in a safe way?

--
Stuart Bishop <email address hidden> http://www.canonical.com/
Canonical Ltd. http://www.ubuntu.com/

[Guilherme Salgado (salgado)]

> Hmm... Zope3 doesn't use cStringIO because it isn't Unicode aware. Are you
> using it in a safe way?
>

Oooops, forgot this detail. I'm not using it in a safe way. I guess I'll
have to use StringIO.StringIO in this case, then.

[Dafydd Harries (daf)]

In that case, should this bug be rejected, or is there still something to be fixed?

[Guilherme Salgado (salgado)]

No, it shouldn't be rejected. After Stuart's comment I realized I should, in fact, be using StringIO.StringIO, but zope3 doesn't have security declarations for that either, so I changed the bug report to say that we need security declarations for StringIO.StringIO.

[Dafydd Harries (daf)]

Thanks for the clarification.

[Colin Watson (cjwatson)]

The zope3 project on Launchpad has been archived at the request of the Zope developers (see https://answers.launchpad.net/launchpad/+question/683589 and https://answers.launchpad.net/launchpad/+question/685285). If this bug is still relevant, please refile it on an appropriate project under https://github.com/zopefoundation.

[Colin Watson (cjwatson)]

This security declaration turned out to no longer be needed in Launchpad and was an obstacle to porting to Python 3, so I've removed it.