*** MrTango has quit IRC | 00:31 | |
*** davisagli has quit IRC | 01:01 | |
*** davisagli has joined #zope | 01:03 | |
*** trustedsage has joined #zope | 01:05 | |
*** tiwula has joined #zope | 01:21 | |
*** alga has quit IRC | 01:31 | |
*** davisagli has quit IRC | 01:35 | |
*** davisagli has joined #zope | 01:35 | |
*** Arfrever has quit IRC | 01:48 | |
*** menesis has quit IRC | 01:53 | |
*** srichter has quit IRC | 02:22 | |
*** srichter has joined #zope | 02:23 | |
*** lewellyn has joined #zope | 04:33 | |
* lewellyn peers in | 04:33 | |
lewellyn | anyone know where to find versions of ZSyncer prior to 1.0.0? :P | 04:34 |
---|---|---|
lewellyn | oh hah. found the version i needed. http://sourceforge.net/projects/zsyncer/files/ZSyncer/ZSyncer-0.7.1/ZSyncer-0.7.1.tgz/download :D | 04:36 |
lewellyn | hrmpfh. i remember why i dislike ZSyncer's older versions now :P | 04:59 |
* lewellyn sighs | 04:59 | |
lewellyn | grr. guess i get to do this by hand. | 05:10 |
*** digitalmortician has quit IRC | 05:39 | |
*** pjfd4 has joined #zope | 05:57 | |
*** srichter has quit IRC | 06:03 | |
*** srichter has joined #zope | 06:10 | |
*** sm has quit IRC | 06:38 | |
CIA-89 | tyam * r121668 z3c.form/src/z3c/form/locales/ (ja ja/LC_MESSAGES/z3c.form.po ja/LC_MESSAGES): added Japanese translation | 06:42 |
*** trustedsage has quit IRC | 06:42 | |
*** trustedsage has joined #zope | 06:43 | |
*** trustedsage has quit IRC | 06:44 | |
*** trustedsage has joined #zope | 06:44 | |
*** thetrustedsage has joined #zope | 06:54 | |
*** trustedsage has quit IRC | 06:55 | |
*** thetrustedsage has quit IRC | 07:25 | |
*** tiwula has quit IRC | 07:25 | |
*** zagy1 has quit IRC | 08:03 | |
*** alexpilz has joined #zope | 08:10 | |
*** alexpilz has quit IRC | 08:18 | |
*** zagy has joined #zope | 08:25 | |
*** ccomb has joined #zope | 08:27 | |
*** pjfd4 has quit IRC | 08:29 | |
*** wosc has joined #zope | 08:44 | |
*** wosc has quit IRC | 08:46 | |
*** wosc has joined #zope | 08:46 | |
*** __mac__ has joined #zope | 09:07 | |
*** agroszer has joined #zope | 09:15 | |
*** shastry has quit IRC | 09:19 | |
*** supton has joined #zope | 09:21 | |
*** tisto has joined #zope | 09:28 | |
*** MrTango has joined #zope | 09:34 | |
*** supton has quit IRC | 09:48 | |
*** yvl has joined #zope | 10:04 | |
*** slackrunner has joined #zope | 10:07 | |
*** planetzopebot has quit IRC | 10:08 | |
*** planetzopebot has joined #zope | 10:09 | |
*** shastry has joined #zope | 10:09 | |
*** alga has joined #zope | 10:13 | |
*** srichter has quit IRC | 10:14 | |
*** humanfromearth has joined #zope | 10:20 | |
*** humanfromearth has left #zope | 10:25 | |
*** goschtl has joined #zope | 10:26 | |
*** hever has joined #zope | 10:33 | |
*** mgedmin has quit IRC | 10:36 | |
*** mgedmin has joined #zope | 10:36 | |
*** srichter has joined #zope | 10:37 | |
*** altipard has joined #zope | 10:38 | |
*** hever has quit IRC | 11:00 | |
*** __mac__ has quit IRC | 11:05 | |
*** hever has joined #zope | 11:15 | |
*** sylvain has joined #zope | 11:21 | |
*** mr_jolly has joined #zope | 11:23 | |
*** menesis has joined #zope | 11:29 | |
CIA-89 | janwijbrand * r121669 martian/src/martian/tests/test_all.py: fix an encoding issue with reading the directive.txt doctest | 11:30 |
*** mitchell`off is now known as mitchell` | 11:34 | |
*** goschtl has quit IRC | 11:46 | |
*** goschtl has joined #zope | 11:51 | |
*** TomBlockley has joined #zope | 11:54 | |
*** slackrunner_ has joined #zope | 12:01 | |
*** slackrunner has quit IRC | 12:01 | |
*** slackrunner_ is now known as slackrunner | 12:01 | |
*** altipard has quit IRC | 12:22 | |
*** Wu has joined #zope | 12:24 | |
*** evilbungle has joined #zope | 12:47 | |
*** teix has joined #zope | 12:47 | |
*** __mac__ has joined #zope | 13:00 | |
*** eperez has joined #zope | 13:09 | |
*** thevishy has joined #zope | 13:26 | |
CIA-89 | janwijbrand * r121670 martian/CHANGES.txt: update changelog | 13:28 |
thevishy | I am sending a request from a JS to Zope ... http://ideone.com/lezlU | 13:31 |
thevishy | How to access this element / values in Zope2 | 13:31 |
thevishy | This is JSON data ( sent from TinyMCE editor) | 13:31 |
betabug | you need something to decode json | 13:32 |
betabug | thevishy: there used to be a product called ZTinyMCE | 13:32 |
betabug | which does TinyMCE integration | 13:32 |
thevishy | this is new tinymce version (3.4.2) | 13:33 |
betabug | hmm, download link is gone :-( | 13:33 |
thevishy | so we are creating a new product | 13:33 |
thevishy | How to see this raw JSON in request object, what is the attribute name | 13:35 |
betabug | do a POST like that to a "Script (Python)" object you create and in the python script do a print context.REQUEST; return printed | 13:36 |
betabug | then you can look at all the request stuff and see where it turns up | 13:36 |
thevishy | ok, will try | 13:36 |
thevishy | betabug: it didn't turn up :( | 13:41 |
*** svenn has joined #zope | 13:42 | |
betabug | hmm, no idea then | 13:42 |
*** svenn has quit IRC | 13:44 | |
thevishy | Right , we need to pull the data at the server side | 13:44 |
*** svenn has joined #zope | 13:44 | |
betabug | maybe look at this code: http://www.zope.org/Members/ree/jsonserver2 | 13:45 |
betabug | it's a bit old, but maybe it gives you some ideas | 13:46 |
*** svenn has quit IRC | 13:46 | |
*** svenn has joined #zope | 13:46 | |
thevishy | will look into that | 13:47 |
*** menesis has quit IRC | 13:51 | |
*** menesis1 has joined #zope | 13:51 | |
*** menesis1 is now known as menesis | 13:51 | |
thevishy | It looks like some monkey patch is required for ZPublisher.HTTPRequest.HTTPRequest | 13:53 |
betabug | outch | 13:53 |
thevishy | betabug: http://paste.pocoo.org/show/389823/ | 13:59 |
thevishy | how to move forward, modify jsonserver2 or is there any other alternative | 14:00 |
betabug | no idea, what zope products are you working with? do you really need Zope 2? | 14:01 |
betabug | very few new projects use Zope 2 | 14:02 |
*** menesis has quit IRC | 14:03 | |
thevishy | betabug: it's an old product | 14:03 |
thevishy | Zope 2 based | 14:03 |
betabug | ah, ok | 14:05 |
betabug | well, can't help you really, never had to do json on zope | 14:05 |
*** m8 has joined #zope | 14:07 | |
thevishy | thanks its a bit old product basically , needs to be continued | 14:08 |
*** m8 has quit IRC | 14:09 | |
betabug | yeah, I've got a few of that myself :-) | 14:10 |
*** m8 has joined #zope | 14:12 | |
thevishy | :) | 14:13 |
kosh | betabug: what is sad is that even though very few new projects use zope 2 there is pretty much nothing else out there with a remotely comparable security track record | 14:15 |
kosh | most have more security exploits in a week then zope does in a year | 14:15 |
kosh | pyramid could be good if people set it to fail closed but the default is fail open but at least it is a one line change | 14:16 |
kosh | the default for all other web frameworks I know is fail open which is just a security disaster | 14:16 |
thevishy | How about Django ? | 14:16 |
betabug | hey kosh | 14:16 |
kosh | fail open | 14:16 |
betabug | kosh: the "fail open" in pyramid is in "development mode"? | 14:17 |
kosh | fail open means all access is allowed unless explicitely denied, fail closed means that all access is denied unless specifically allowed | 14:17 |
*** goschtl has quit IRC | 14:17 | |
kosh | betabug: not it is a default security policy and when I looked the default security policy was allow but a one line change would make it default to deny | 14:17 |
kosh | so pyramid looks like it could be used for fail closed with a trivial one time change | 14:18 |
betabug | ah | 14:18 |
kosh | still should not be required though | 14:18 |
betabug | yes | 14:18 |
kosh | but devs are used to fail open because it is easier to get started | 14:18 |
kosh | they can just hurl anything they want and the system and it kind of works without any config | 14:18 |
betabug | yeah | 14:18 |
*** tisto is now known as tisto|lunch | 14:18 | |
betabug | not good in production though | 14:18 |
kosh | which is also why they have such horrible security track records | 14:19 |
kosh | I was reading a page on rails security recently that someone showed me | 14:19 |
kosh | and rails has a lot of basic security issues that even zope from 10 years ago did not have | 14:19 |
*** Wu has quit IRC | 14:19 | |
kosh | some default configuration for how it does CRUD is also sql injectable | 14:20 |
betabug | outch | 14:20 |
kosh | so the docs where recomending that people don't do the processing in some default way | 14:20 |
kosh | it just seems that we keep getting new framework after new framework with all kinds of features to make it much faster and lower server load to exploit your server ;) | 14:21 |
kosh | so with the newest framework you can write far less code and get your exploitable server up and running in record time! | 14:21 |
*** thevishy has quit IRC | 14:21 | |
betabug | haha | 14:22 |
kosh | also while we may make fun of plone a lot for being slow, using lots of memory and being massively heavy in code that thing is like a god for security compared to the other cms | 14:23 |
betabug | even if the crackers get in totally, they have to move so slow the police will arrive and arrest them in time | 14:24 |
kosh | I may not like it very much but they did take security fairly seriously and built on a good foundation at least | 14:24 |
kosh | zope 2 is pretty good at keeping people out, it is the greatest advantage it has | 14:25 |
kosh | what annoys me about grok is that grok is fail open | 14:25 |
kosh | overall pyramid looks like the best upgrade path right now | 14:28 |
betabug | pyramid looks good | 14:30 |
kosh | and you could still use zeo with it along with many other zope 2 technologies | 14:31 |
betabug | yeah | 14:31 |
betabug | lots of concepts work the same | 14:31 |
betabug | there is less "included in the box", but ok | 14:31 |
betabug | there will be more shopping around in the pypi bins, but then you maybe get what you really want | 14:32 |
kosh | I expect it to take a lot more work then just using zope 2.x though unfortunately | 14:32 |
betabug | yeah, could be | 14:32 |
kosh | however it looks like you could at least build a remotely secure system | 14:33 |
kosh | heh probably end up with a standard pyramid buildout of a bunch of normal things and call it pyramid.zope2 :) | 14:33 |
betabug | hehe | 14:36 |
*** benji has joined #zope | 14:37 | |
kosh | see you freaks later | 14:44 |
*** svenn has quit IRC | 14:45 | |
*** kleist has joined #zope | 14:51 | |
*** menesis has joined #zope | 15:12 | |
*** menesis has quit IRC | 15:17 | |
*** menesis has joined #zope | 15:32 | |
*** tisto|lunch is now known as tisto | 15:42 | |
*** m8 has quit IRC | 15:48 | |
*** hever has quit IRC | 15:51 | |
*** kleist_ has joined #zope | 15:53 | |
*** kleist has quit IRC | 15:57 | |
*** pjfd4 has joined #zope | 16:00 | |
*** thetet has joined #zope | 16:07 | |
*** thetet has left #zope | 16:09 | |
CIA-89 | jfroche * r121671 /Sandbox/gotcha/five.taskqueue/trunk/ (src/five/taskqueue/processor.py docs/HISTORY.txt): Avoid code to stop thread and set the default value for variable before exception | 16:17 |
CIA-89 | jfroche * r121672 /Sandbox/gotcha/z3c.taskqueue/trunk/ (docs/HISTORY.txt src/z3c/taskqueue/processor.py): Avoid thread to stop if there is an error in processNext | 16:17 |
*** hever has joined #zope | 16:19 | |
*** sm has joined #zope | 16:19 | |
*** sp0cksbeard has joined #zope | 16:21 | |
*** wosc has quit IRC | 16:29 | |
*** ccomb has quit IRC | 16:53 | |
*** ccomb has joined #zope | 17:07 | |
*** ccomb1 has joined #zope | 17:10 | |
*** ccomb has quit IRC | 17:12 | |
sm | lewellyn: http://wiki.zope.org/zope2/ZSyncer any use ? just how old is your zope ? | 17:15 |
*** thetet has joined #zope | 17:19 | |
*** alga has quit IRC | 17:24 | |
*** Wu has joined #zope | 17:32 | |
*** Gogo|gui has joined #zope | 17:43 | |
*** Gogo|gui has quit IRC | 17:53 | |
*** alvaro_o has joined #zope | 18:02 | |
*** tisto is now known as tisto|away | 18:04 | |
*** webmaven has quit IRC | 18:04 | |
*** alvaro_o has quit IRC | 18:04 | |
teix | kosh: take note that already exists a repoze.zope2 package out there :) | 18:06 |
teix | kosh: in other proposes though | 18:06 |
*** zagy has quit IRC | 18:13 | |
*** Arfrever has joined #zope | 18:16 | |
*** cwarner has joined #zope | 18:19 | |
*** alga has joined #zope | 18:22 | |
*** agroszer has quit IRC | 18:35 | |
*** tisto|away is now known as tisto | 18:41 | |
*** __mac__ has quit IRC | 18:43 | |
*** daMaestro has joined #zope | 18:49 | |
*** thetet has left #zope | 18:54 | |
*** m8 has joined #zope | 19:01 | |
*** supton has joined #zope | 19:05 | |
*** zagy has joined #zope | 19:06 | |
*** Gogo|gui has joined #zope | 19:08 | |
*** sm_ has joined #zope | 19:19 | |
*** sm has quit IRC | 19:22 | |
*** sm_ is now known as sm | 19:22 | |
*** sm_ has joined #zope | 19:24 | |
*** sm has quit IRC | 19:27 | |
*** sm_ is now known as sm | 19:27 | |
CIA-89 | jfroche * r121673 /Sandbox/gotcha/z3c.taskqueue/trunk/ (docs/HISTORY.txt setup.py): Preparing release 0.1-alpha-4 | 19:28 |
CIA-89 | jfroche * r121674 /Sandbox/gotcha/z3c.taskqueue/tags/0.1-alpha-4: Tagging 0.1-alpha-4 | 19:28 |
CIA-89 | jfroche * r121675 /Sandbox/gotcha/z3c.taskqueue/trunk/ (docs/HISTORY.txt setup.py): Back to development: 0.1-alpha-5 | 19:28 |
CIA-89 | jfroche * r121676 /Sandbox/gotcha/five.taskqueue/trunk/ (docs/HISTORY.txt setup.py): Preparing release 0.1-alpha-3 | 19:28 |
CIA-89 | jfroche * r121677 /Sandbox/gotcha/five.taskqueue/tags/0.1-alpha-3: Tagging 0.1-alpha-3 | 19:28 |
CIA-89 | jfroche * r121678 /Sandbox/gotcha/five.taskqueue/trunk/ (docs/HISTORY.txt setup.py): Back to development: 0.1-alpha-4 | 19:28 |
CIA-89 | ldr * r121679 Products.ZCatalog/ (2 files in 2 dirs): Substitute catalog entry in UUIDIndex error message. | 19:28 |
CIA-89 | janwijbrand * r121680 grokproject/grokproject/template/ (4 files in 2 dirs): there was an inconsistency where the various logfiles we placed. fixed the situation by consistenly use the intended "{buildout}/var/log" location throughout. | 19:28 |
CIA-89 | janwijbrand * r121681 grokproject/CHANGES.txt: update changelog | 19:28 |
*** tiwula has joined #zope | 19:32 | |
*** zagy1 has joined #zope | 19:37 | |
*** zagy has quit IRC | 19:37 | |
*** Gogo|gui has quit IRC | 19:41 | |
*** Gogo|gui has joined #zope | 19:49 | |
*** sylvain has quit IRC | 19:50 | |
*** Wu has quit IRC | 19:54 | |
*** kleist__ has joined #zope | 19:54 | |
*** kleist_ has quit IRC | 19:58 | |
*** kleist__ has quit IRC | 20:02 | |
*** __mac__ has joined #zope | 20:04 | |
*** __mac__ has quit IRC | 20:04 | |
*** agroszer has joined #zope | 20:06 | |
*** Gogo|gui1 has joined #zope | 20:07 | |
*** Gogo|gui has quit IRC | 20:07 | |
*** eperez has quit IRC | 20:10 | |
*** mitchell` is now known as mitchell`off | 20:13 | |
*** menesis has quit IRC | 20:14 | |
*** TomBlockley has quit IRC | 20:15 | |
*** TomBlockley has joined #zope | 20:18 | |
*** srichter has quit IRC | 20:34 | |
*** srichter has joined #zope | 20:35 | |
*** TomBlockley has quit IRC | 20:41 | |
*** zagy has joined #zope | 20:47 | |
*** zagy1 has quit IRC | 20:47 | |
*** tisto has quit IRC | 20:52 | |
*** Gogo|gui1 has quit IRC | 21:09 | |
*** agroszer has quit IRC | 21:12 | |
*** __mac__ has joined #zope | 21:14 | |
*** menesis has joined #zope | 21:20 | |
*** menesis has quit IRC | 21:25 | |
*** zagy1 has joined #zope | 21:27 | |
*** zagy has quit IRC | 21:27 | |
*** agroszer has joined #zope | 21:27 | |
*** pjfd2 has joined #zope | 21:35 | |
*** pjfd4 has quit IRC | 21:36 | |
*** menesis has joined #zope | 21:38 | |
*** supton_ has joined #zope | 21:57 | |
*** teix has quit IRC | 21:59 | |
*** supton has quit IRC | 22:00 | |
*** supton_ has quit IRC | 22:01 | |
*** webmaven has joined #zope | 22:01 | |
*** supton has joined #zope | 22:07 | |
*** evilbungle has quit IRC | 22:13 | |
*** Gogo|gui has joined #zope | 22:22 | |
*** Gogo|gui has quit IRC | 22:28 | |
*** agroszer has quit IRC | 22:31 | |
*** menesis has quit IRC | 22:35 | |
*** zagy has joined #zope | 22:37 | |
*** zagy1 has quit IRC | 22:37 | |
*** Gogo|gui has joined #zope | 22:56 | |
*** __mac__ has quit IRC | 23:00 | |
*** __mac__ has joined #zope | 23:00 | |
*** zagy has quit IRC | 23:10 | |
*** __mac__ has quit IRC | 23:13 | |
*** Gogo|gui has quit IRC | 23:13 | |
*** John[a] has joined #zope | 23:16 | |
*** trustedsage has joined #zope | 23:18 | |
*** hever has quit IRC | 23:20 | |
*** Gogo|gui has joined #zope | 23:24 | |
*** Gogo|gui has quit IRC | 23:55 |
Generated by irclog2html.py 2.15.1 by Marius Gedminas - find it at mg.pov.lt!