diff --git a/CHANGES.rst b/CHANGES.rst index 550a544..5e7a4c7 100644 --- a/CHANGES.rst +++ b/CHANGES.rst @@ -4,7 +4,9 @@ Changelog 5.1 (unreleased) ---------------- -- Nothing changed yet. +- Fix Zope test failures accessing sequence wrappers introduced in #76 + from untrusted code. + (`#81 `_) 5.0 (2025-11-27) diff --git a/src/DocumentTemplate/DT_Util.py b/src/DocumentTemplate/DT_Util.py index ecb63a6..9b43eb2 100644 --- a/src/DocumentTemplate/DT_Util.py +++ b/src/DocumentTemplate/DT_Util.py @@ -479,6 +479,8 @@ def sequence_ensure_subscription(obj): class SequenceFromIter: """Iterator wrapper supporting lazy sequence subscription.""" + __allow_access_to_unprotected_subobjects__ = 1 + finished = False def __init__(self, it):