Remove monkey patches from plone.protect 3.X

[fredvd]

plone.protect has 3 monkeypatches into other parts of Plone/Zope. Two are done using collective.monkeypatcher and replacing stuff in Products.CMFormController and Zope2 webdav.

A) Products.CMFFormController can be done right away (should be patched for both Plone 4 and Plone 5 if we stick to plone.protect 3.x for both Plone 4 and 5)

B) webdav can be done once we have know where to base Zope on. (Zope 2.13.X, Zope 4.X)

C) plone.protect also disables Products.PluggableAuthServices getCSRFToken and checkCSRFToken, presumably because these are the older CRSF protection framewok methods that are now taken over by plone.protect 3.X . Should that CSRF part be removed completely from Products.PluggableAuthServices?

[thet]

Also see:

• Move patch from plone.protect 3.x to Actions.RedirectTo Products.CMFFormController#3
• Clean up the monkey patch for CMFFormController RedirectTo. plone.protect#37