Re: Use-cases for strictinsert=True?

Florent Guillaume <[email protected]> Wed, 21 Sep 2005 20:02:13 +0200
Newsgroups gmane.comp.web.zope.page-templates
Message-ID <[email protected]>
Thomas Lotze wrote:
> Tonico Strasser wrote:
> 
> 
>>Just for my understanding: would it be possible to dynamically create
>>macros with strictinsert=True?:
> 
> 
> It means that if <div tal:content="structure foo/bar" /> is interpreted
> with strictinsert=True on the TALInterpreter used, foo/bar had better
> resolve to something well-formed.

If that was the only behavior, it would be a mildly interesting feature for 
some use cases, but...

>><div
>>   tal:repeat="name python: ('foo', 'bar', 'baz')" tal:replace="structure
>>   string:&lt;div metal:define-macro='$name'/&gt;" />

this is definitely something we DON'T want, a potential security hole and 
useless feature.

+1 on removing strictinsert.

Florent

-- 
Florent Guillaume, Nuxeo (Paris, France)   CTO, Director of R&D
+33 1 40 33 71 59   http://nuxeo.com   [email protected]