Tornado is a Python web framework and asynchronous networking library, originally developed at FriendFeed.
Go to file
Ben Darnell 90b8078739 BACKWARDS-INCOMPATIBLE: Fix XSRF security vulnerability.
This is a backwards-incompatible change.  Applications that previously
relied on a blanket exception for XMLHTTPRequest may need to be modified
to explicitly include the XSRF token when making ajax requests.

The tornado chat demo application demonstrates one way of adding this
token (specifically the function postJSON in demos/chat/static/chat.js).

More information about this change and its justification can be found at
http://www.djangoproject.com/weblog/2011/feb/08/security/
http://weblog.rubyonrails.org/2011/2/8/csrf-protection-bypass-in-ruby-on-rails

Closes #214.
2011-02-08 22:29:40 -08:00
demos Replace all tabs with spaces. 2010-03-17 14:59:17 -07:00
tornado BACKWARDS-INCOMPATIBLE: Fix XSRF security vulnerability. 2011-02-08 22:29:40 -08:00
website Bump version number to 1.1 2010-09-07 17:05:12 -07:00
.gitignore updated the gitignore to include files generated on installation 2010-03-14 00:08:26 -03:00
MANIFEST.in Move Tornado project to Github 2009-09-10 00:50:51 -07:00
README Move Tornado project to Github 2009-09-10 00:50:51 -07:00
setup.py Bump version number to 1.1 2010-09-07 17:05:12 -07:00

README

Tornado
=======
Tornado is an open source version of the scalable, non-blocking web server
and and tools that power FriendFeed. Documentation and downloads are
available at http://www.tornadoweb.org/

Tornado is licensed under the Apache Licence, Version 2.0
(http://www.apache.org/licenses/LICENSE-2.0.html).

Installation
============
To install:

    python setup.py build
    sudo python setup.py install

Tornado has been tested on Python 2.5 and 2.6. To use all of the features
of Tornado, you need to have PycURL and a JSON library like simplejson
installed.

On Mac OS X, you can install the packages with:

    sudo easy_install setuptools pycurl==7.16.2.1 simplejson

On Ubuntu Linux, you can install the packages with:

    sudo apt-get install python-pycurl python-simplejson