Hello,

>From what I understand, web2py doesn't allow certain special
characters in incoming urls because it's a possible security issue
(found here: http://ru.ly/F8).  I need to accept parentheses in my
application and I really don't want to have to maintain a slightly
different fork of web2py.

Would it be reasonable to apply the routes.py file before that security check?

This way, developers could still accept urls with certain special
characters, but would have to do it explicitly.  This would force them
to consider the security implications.

Thoughts?

Brian

--~--~---------~--~----~------------~-------~--~----~
You received this message because you are subscribed to the Google Groups 
"web2py Web Framework" group.
To post to this group, send email to web2py@googlegroups.com
To unsubscribe from this group, send email to 
web2py+unsubscr...@googlegroups.com
For more options, visit this group at 
http://groups.google.com/group/web2py?hl=en
-~----------~----~----~----~------~----~------~--~---

Reply via email to