Re: Use-cases for strictinsert=True?
Florent Guillaume <[email protected]> Wed, 21 Sep 2005 20:02:13 +0200
| Newsgroups | gmane.comp.web.zope.page-templates |
|---|---|
| Message-ID | <[email protected]> |
Thomas Lotze wrote:
> Tonico Strasser wrote:
>
>
>>Just for my understanding: would it be possible to dynamically create
>>macros with strictinsert=True?:
>
>
> It means that if <div tal:content="structure foo/bar" /> is interpreted
> with strictinsert=True on the TALInterpreter used, foo/bar had better
> resolve to something well-formed.
If that was the only behavior, it would be a mildly interesting feature for
some use cases, but...
>><div
>> tal:repeat="name python: ('foo', 'bar', 'baz')" tal:replace="structure
>> string:<div metal:define-macro='$name'/>" />
this is definitely something we DON'T want, a potential security hole and
useless feature.
+1 on removing strictinsert.
Florent
--
Florent Guillaume, Nuxeo (Paris, France) CTO, Director of R&D
+33 1 40 33 71 59 http://nuxeo.com [email protected]