From 5fd90c421d959060d97be2b4b40e146edb6c3127 Mon Sep 17 00:00:00 2001 From: helmutm Date: Wed, 1 Jul 2009 13:16:53 +0000 Subject: [PATCH] no security check on accessing the nodeType attribute during traversal git-svn-id: svn://svn.cy55.de/Zope3/src/loops/trunk@3438 fd906abe-77d9-0310-91a1-e0d9ade77398 --- browser/node.py | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/browser/node.py b/browser/node.py index 2ab46ac..b1b3b27 100644 --- a/browser/node.py +++ b/browser/node.py @@ -788,7 +788,7 @@ class NodeTraverser(ItemTraverser): def publishTraverse(self, request, name): viewAnnotations = request.annotations.setdefault('loops.view', {}) viewAnnotations['node'] = self.context - if self.context.nodeType == 'menu': + if removeSecurityProxy(self.context).nodeType == 'menu': setViewConfiguration(self.context, request) if name == '.loops': return self.context.getLoopsRoot()