this shows a security problem with RelationStringField; patch solving this issue is in http://svn.erp5.org/experimental/FSPatch/Products/ERP5Form/ERP5Form_safeRelationField.diff

git-svn-id: https://svn.erp5.org/repos/public/erp5/trunk@19744 20353a03-c40f-0410-a6d1-a30d3c3de9de