id	summary	reporter	owner	description	type	status	priority	milestone	component	version	resolution	keywords	cc
151	Undefined behavor of extended iteration	aronacher	cmlenz	"Right now `for foo.bar, blub['blah'] in something` is undefined in genshi (it does nothing, especially no error) and `for foo['a in b'] in bar` breaks with a syntax error although it's valid python.

Because of my work on the sandboxed branch it's important that iterations do not modify existing objects because they could be persistent, thus shared among renderings. A quickfix would be changing the ` in ` split to a regex like this:

{{{
r([A-Za-z_][A-Za-z0-9_]*(\s*,\s*[A-Za-z_][A-Za-z0-9_]*)*)\s+in
}}}

That would then automatically close the security problem of the sandbox branch too."	defect	new	major	0.9	General	0.4.4