Comment 4 for bug 5133

No, it shouldn't be rejected. After Stuart's comment I realized I should, in fact, be using StringIO.StringIO, but zope3 doesn't have security declarations for that either, so I changed the bug report to say that we need security declarations for StringIO.StringIO.