From: Ben Darnell <ben@bendarnell.com>
Date: Wed, 9 Jul 2014 02:49:30 +0000 (-0400)
Subject: Add XSRF change to the release notes.
X-Git-Tag: v4.0.0b3~1
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=943dbdf3083eec84e1977012256a5b63999dfc58;p=thirdparty%2Ftornado.git

Add XSRF change to the release notes.
---

diff --git a/docs/releases/next.rst b/docs/releases/next.rst
index 2d99dd1f2..5dcd20ebd 100644
--- a/docs/releases/next.rst
+++ b/docs/releases/next.rst
@@ -269,6 +269,11 @@ Other notes
 * `.StaticFileHandler` now streams response bodies to the client.
 * New setting ``compress_response`` replaces the existing ``gzip``
   setting; both names are accepted.
+* XSRF cookies that were not generated by this module (i.e. strings without
+  any particular formatting) are once again accepted (as long as the
+  cookie and body/header match).  This pattern was common for
+  testing and non-browser clients but was broken by the changes in
+  Tornado 3.2.2.
 
 `tornado.websocket`
 ~~~~~~~~~~~~~~~~~~~