13 lines
325 B
ReStructuredText
13 lines
325 B
ReStructuredText
|
What's new in Tornado 4.2.1
|
||
|
|
===========================
|
||
|
|
|
||
|
|
Jul 17, 2015
|
||
|
|
------------
|
||
|
|
|
||
|
|
Security fix
|
||
|
|
~~~~~~~~~~~~
|
||
|
|
|
||
|
|
* This release fixes a path traversal vulnerability in `.StaticFileHandler`,
|
||
|
|
in which files whose names *started with* the ``static_path`` directory
|
||
|
|
but were not actually *in* that directory could be accessed.
|