The above patch renders request unpublishable, but doesn't fix this test case:
http://localhost:8080/Plone/@@myview/request/RESPONSE/setBody?body=evil
Attached is the patch I developed for some forthcoming Plone hotfix.
The above patch renders request unpublishable, but doesn't fix this test case:
http:// localhost: 8080/Plone/ @@myview/ request/ RESPONSE/ setBody? body=evil
Attached is the patch I developed for some forthcoming Plone hotfix.