]> git.ipfire.org Git - thirdparty/tornado.git/tag
projects / thirdparty / tornado.git / tag
? search:
summary | shortlog | log | commit | commitdiff | tree

v4.2.1
object 5d4d114354f86b663e4ed4d963075237bf7e8a35 commit
authorBen Darnell <ben@bendarnell.com>
Fri, 17 Jul 2015 15:49:14 +0000 (11:49 -0400)
Tornado 4.2.1

Jul 17, 2015
------------

Security fix
~~~~~~~~~~~~

* This release fixes a path traversal vulnerability in `.StaticFileHandler`,
  in which files whose names *started with* the ``static_path`` directory
  but were not actually *in* that directory could be accessed.
Mirror of https://github.com/tornadoweb/tornado.git