Also, reformat doc strings, remove an unused global variable, and
remove one whitespace character.  (I've already used the whitespace
in a different module.)

As extra is no longer mandatory, grab the correct lexicon ID for the error message and in the process escape it so no HTML can be sneaked in.

each loop, making cDocumentTemplate html_quote only the first dtml-var,
if at all.

This may expose more bugs in the dtml-var tainting.  I'm not to blame. ;-)

more <wink>, and cause gcc to give spurious warnings.

ZOPE_DTML_REQUEST_AUTOQUOTE to one of 'no', '0', or 'disabled' and no
tainting will take place.

- Make DTML automatically html quote data indirectly taken from REQUEST
  which contain a '<'. Make sure (almost) all string operation preserve the
  taint on this data.

- Fix exceptions that use REQUEST data; quote the data.

- Don't let form and cookie values mask the REQUEST computed values such as
  URL0 and BASE1.

rather than the result set when the result set is much larger than the
sort index.  Added a test and cleaned up the test framework.

catalogs no-longer come with pre-existing indexes. Also removed an
unused method.

the length of the concatenated sequence is not the same as the length of r,
since r contains sequences of different sizes.  Let LazyCat compute the
length.

and sort results from multiple catalogs (or multiple queries) efficiently.

users the Manager proxy role when uploading files - a potential
vulnerability on production servers.

API documentation.

path. This was added primarily for the purpose of determining if an
object was catalogged.

never imported. The doc strings should still be converted to standard
format.

ClassSecurityInfo except that access to unprotected subobjects is
denied. Use this class to provide more explicit, and, thus more
secure, protection for methods.

Silence warnings.
Add :name to PyArg_ParseTuple() call.

XXX: Still missing tests for the new unicode marshall code.

Note that we'll fail on filenames with spaces or quotes in them.

program to overwrite a section of the global offset table!  Changing this
to unsigned char fixes the problem.

- Clear up a comment

- Rename 'keys, values' to 'key, value'

- Fix potential bug: If the default for a given form entry is a list, but
  the form provided only one value (and didn't indicate it should be a list
  with :list), appending the defaults would fail.

- Fix bug: If the default is a list of primitive items (not records), none
  of them would be added to the form field due to the use of the wrong
  (potentially non-existing) variable name.

- Use isinstance(var, lt) instead of type(var) == type([]).