Bugger it. Here's the current shape of the new security implementation. Still to do: . call the security funcs from cgi and mailgw . change shipped templates to include correct initialisation and remove the old config vars ... that seems like a lot. The bulk of the work has been done though. Honest :)

<!-- $Id: msg.index,v 1.3 2002-05-22 00:32:34 richard Exp $-->
<tr class="row-hilite">
    <td><display call="link('date')"></td>
    <td><display call="plain('author')"></td>
</tr>
<tr class="msg-content">
    <td colspan=2><pre><display call="plain('content', escape=1)"></pre></td>
</tr>