Add more changes for 0.6b1 (quixote: setup.py, CHANGES)

Update of /home/cvs/quixote
In directory hewson:/tmp/cvs-serv21402

Modified Files:
	setup.py CHANGES 
Log Message:
Add more changes for 0.6b1


Index: setup.py
===================================================================
RCS file: /home/cvs/quixote/setup.py,v
retrieving revision 1.27
retrieving revision 1.28
diff -u -d -r1.27 -r1.28
--- setup.py	8 Jan 2003 19:45:17 -0000	1.27
+++ setup.py	9 Jan 2003 14:07:43 -0000	1.28
@@ -13,7 +13,7 @@
                       sources=["src/_c_htmltext.c"])
 
 setup (name = "Quixote",
-       version = "0.6",
+       version = "0.6b1",
        description = "A highly Pythonic Web application framework",
        author = "MEMS Exchange",
        author_email = "quixote-fVcApmY9cLvQ3/1i3zOLAti2O/[email protected]",

Index: CHANGES
===================================================================
RCS file: /home/cvs/quixote/CHANGES,v
retrieving revision 1.50
retrieving revision 1.51
diff -u -d -r1.50 -r1.51
--- CHANGES	7 Jan 2003 16:26:41 -0000	1.50
+++ CHANGES	9 Jan 2003 14:07:43 -0000	1.51
@@ -1,16 +1,50 @@
-0.6 (?? ??? 2003):
+0.6b1 (?? ??? 2003):
 
   * Merged form/form.py and form/form_templates.ptl into
-    form/form.ptl. (This means that you should completely remove [or
-    rename] your old Quixote installation directory *before* installing
+    form/form.ptl. (This means that you should completely remove (or
+    rename) your old Quixote installation directory *before* installing
     0.6, or the old form/form.py will shadow the new form.ptl.)
+
+  * A new and preferred syntax for declaring PTL templates has been added.
+    Instead of 'template func(): ...', the new form is 'def func [plain] ()'.
+
+    This uses a notation that's been suggested for adding type
+    information to Python functions.  The Emacs Python mode already handles 
+    this properly, and it may be more compatible with future versions of 
+    Python.
+
+    The 'template' keyword is still supported, but we encourage you 
+    to switch to the new syntax when you get a chance.
+
+  * Quixote now supports a new kind of template that automatically performs
+    HTML escaping.  Here's an example.  (Notice that the '[plain]'
+    annotation is changed to '[html]' to enable this feature.)
+
+        def header [html] (title):
+            "<title>%s</title>" % title
+
+    If the 'title' argument is something like "R&D", it will    
+    automatically be converted to "R&amp;D" following the rules 
+    for escaping HTML special characters.  The aim is to avoid cross-site 
+    scripting attacks by automatically 
+
+    See doc/PTL.txt for more information about how this works.
+
+    This escaping is implemented using a 'htmltext' class implemented in 
+    Python, and is currently in production use on our web site.
+
+  * An experimental C implementation of the 'htmltext' type is also
+    included; it hasn't been put into production use yet.  Edit 
+    setup.py and uncomment the appropriate line if you want to try the
+    C implementation.
     
   * The form framework now uses automatic HTML escaping.  This
     means that applications using the form framework will have 
     to either be changed to use automatic HTML escaping themselves, 
-    or to use str() to convert htmltext instances back to Python strings.
+    or to use str() to convert 'htmltext' instances back to Python
+    strings.
     
-    See doc/upgrading.txt for more information. 
+    See doc/upgrading.txt for more information.
 
   * Make Quixote a bit more friendly to multi-threaded applications
     by allowing multiple simultaneous publishers, each handling one