[Erp5-report] r13441 - /erp5/trunk/products/ERP5/Tool/ContributionTool.py
nobody at svn.erp5.org
nobody at svn.erp5.org
Thu Mar 15 23:05:36 CET 2007
Author: jp
Date: Thu Mar 15 23:05:34 2007
New Revision: 13441
URL: http://svn.erp5.org?rev=13441&view=rev
Log:
Added comments for security.
Modified:
erp5/trunk/products/ERP5/Tool/ContributionTool.py
Modified: erp5/trunk/products/ERP5/Tool/ContributionTool.py
URL: http://svn.erp5.org/erp5/trunk/products/ERP5/Tool/ContributionTool.py?rev=13441&r1=13440&r2=13441&view=diff
==============================================================================
--- erp5/trunk/products/ERP5/Tool/ContributionTool.py (original)
+++ erp5/trunk/products/ERP5/Tool/ContributionTool.py Thu Mar 15 23:05:34 2007
@@ -341,7 +341,7 @@
uid = str(id).split('-')[-1]
object = self.getPortalObject().portal_catalog.unrestrictedGetResultValue(uid=uid)
if object is not None:
- return object.getObject()
+ return object.getObject() # Make sure this does not break security. XXX
# Fallback to default method
if default is _marker:
More information about the Erp5-report
mailing list