Release notes for 2.2.1

This commit is contained in:
Ben Darnell 2012-04-23 22:03:17 -07:00
parent 1ae91f6d58
commit c135c368de
2 changed files with 21 additions and 0 deletions

View File

@ -4,6 +4,7 @@ Release notes
.. toctree::
:maxdepth: 2
releases/v2.2.1
releases/v2.2.0
releases/v2.1.1
releases/v2.1.0

View File

@ -0,0 +1,20 @@
What's new in Tornado 2.2.1
===========================
Apr 23, 2012
------------
Security fixes
~~~~~~~~~~~~~~
* `tornado.web.RequestHandler.set_header` now properly sanitizes input
values to protect against header injection, response splitting, etc.
(it has always attempted to do this, but the check was incorrect).
Note that redirects, the most likely source of such bugs, are protected
by a separate check in `RequestHandler.redirect`.
Bug fixes
~~~~~~~~~
* Colored logging configuration in `tornado.options` is compatible with
Python 3.2.3 (and 3.3).