docutil's security restrictions are now applied using a monkey patch;  this way the upstream version of docutils can be used (i.e. an egg)

branch not using a customized flavour of docutils, but a monkey patch addressing the security issues instead;  this makes it possible to use the regular docutils egg when eggifying zope2...

as its own project, egg).

Merged from 2.10 branch - Collector #2320: HTTPResponse setHeader lowercased keys but getHeader did not, causing lookups of 'Content-Type' to fail

Support for using zopectl on Windows has been added. All commands are supported and there are two Windows specific ones: install and remove, which install or remove the Windows service. The start, stop and restart commands handle the Windows service.

Fix DateIndex date display; unpack stored integers into something meaningful. This fixes Collector #2316.

Fix potential bug in requestmethod where you cannot specify None for a keyword argument where None is not the default

http://www.zope.org/Collectors/Zope/2308.

Collector #2300: delimit *all* headers with CRLF; accumulated_headers and appendHeader use \n for delimeters and never get corrected on output

headers of plain html files served from Zope3 resource directories.

Also cleanup whitespace in CHANGES.txt.

not send the expected copy/move events.

Note: Tests live in OFS.tests.

- Add a request method decorator to AccessControl, creating decorators that limit a method to one request method only.
- Protect various security-setting-mutators with a POST-only decorator.