URL-Traversal aware '__bobo_traverse__'
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
Zope 2 |
Invalid
|
Medium
|
Unassigned |
Bug Description
"__bobo_traverse__" is used both for URL
traversal and various "[un]restricted
Unfortunately, "not found" needs to be handled
quite differently during URL traversal ("NullResource" generation,
RESPONSE.
The best way would be to pass this information as parameter
to "__bobo_
this.
As a workaround, the attached patch sets the attribute "performingUrlT
on REQUEST. "__bobo_traverse__" implementations can check it
to perform the correct thing when they cannot resolve "name".
The check should have the form
"getattr(
Changed in zope2: | |
status: | New → Triaged |
tags: |
added: bugday traversal removed: feature+solution zope |
The zope2 project on Launchpad has been archived at the request of the Zope developers (see https:/ /answers. launchpad. net/launchpad/ +question/ 683589 and https:/ /answers. launchpad. net/launchpad/ +question/ 685285). If this bug is still relevant, please refile it at https:/ /github. com/zopefoundat ion/zope2.