- reStructuredText/ZReST: setting raw_enabled to 0 for security

        reasons

doc/CHANGES.txt

@@ -18,6 +18,9 @@ Zope Changes
 
     Bugs Fixed
 
+      - reStructuredText/ZReST: setting raw_enabled to 0 for security
+        reasons
+
       - Collector #2113:  'zopectl test' masked Ctrl-C.
 
       - OFS Image: Image and File updated to use isinstance(data, str)

lib/python/Products/ZReST/ZReST.py

@@ -204,6 +204,7 @@ class ZReST(Item, PropertyManager, Historical, Implicit, Persistent):
                 'stylesheet_path' : None,
                 'pub.settings.warning_stream' :  Warnings(),
                 'file_insertion_enabled' : 0,
+                'raw_enabled' : 0,
                 }
 
             self._v_formatted = docutils.core.publish_string(

lib/python/reStructuredText/__init__.py

@@ -73,6 +73,7 @@ def render(src,
     settings['stylesheet'] = stylesheet
     settings['stylesheet_path'] = None
     settings['file_insertion_enabled'] = 0
+    settings['raw_enabled'] = 0
     if language_code:
         settings['language_code'] = language_code
     settings['language_code'] = language_code