I'm checkin in the fix for 3.2, 3.3 and trunk. However, I don't see a reasonable way to test this. :(
Therefore I will not close this issue. If somebody could give me a hint on how to test this, I'd do it.
We might want to go for a disclosure now. I have not added a changelog entry though. The *default* configuration still exposes
the template code. Switching off the devmode disables access to
the ++debug++ namespace.
I'm checkin in the fix for 3.2, 3.3 and trunk. However, I don't see a reasonable way to test this. :(
Therefore I will not close this issue. If somebody could give me a hint on how to test this, I'd do it.
We might want to go for a disclosure now. I have not added a changelog entry though. The *default* configuration still exposes
the template code. Switching off the devmode disables access to
the ++debug++ namespace.
Comments?