Now
MAIN commitmail json YAML
pkgsrc/www/py-tornado/Makefile@1.13
/
diff
pkgsrc/www/py-tornado/PLIST@1.8 / diff
pkgsrc/www/py-tornado/distinfo@1.11 / diff
pkgsrc/www/py-tornado/PLIST@1.8 / diff
pkgsrc/www/py-tornado/distinfo@1.11 / diff
Update to 4.2.1:
What's new in Tornado 4.2.1
===========================
Jul 17, 2015
------------
Security fix
~~~~~~~~~~~~
* This release fixes a path traversal vulnerability in `.StaticFileHandler`,
in which files whose names *started with* the ``static_path`` directory
but were not actually *in* that directory could be accessed.
What's new in Tornado 4.2.1
===========================
Jul 17, 2015
------------
Security fix
~~~~~~~~~~~~
* This release fixes a path traversal vulnerability in `.StaticFileHandler`,
in which files whose names *started with* the ``static_path`` directory
but were not actually *in* that directory could be accessed.