Merged aq-wrapping fix to preserve security in ZopeFindAndApply

zopefoundation · Jul 31, 2000 · 36f294e · 36f294e
1 parent 99688a1
commit 36f294e
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/ZCatalog.py b/ZCatalog.py
@@ -526,7 +526,7 @@ def ZopeFindAndApply(self, obj, obj_ids=None, obj_metatypes=None,
 
         if not hasattr(base, 'objectItems'):
             return result
-        try:    items=base.objectItems()
+        try:    items=obj.objectItems()
         except: return result
 
         try: add_result=result.append