From c212fe4cb17ec24607674cadaeac3a6b932d20ba Mon Sep 17 00:00:00 2001 From: Ben Darnell Date: Tue, 10 Mar 2026 20:48:55 -0400 Subject: [PATCH] docs: Use correct link syntax, not markdown. --- docs/releases/v6.5.5.rst | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/docs/releases/v6.5.5.rst b/docs/releases/v6.5.5.rst index 87cc9ff3..e5b3d87e 100644 --- a/docs/releases/v6.5.5.rst +++ b/docs/releases/v6.5.5.rst @@ -10,10 +10,10 @@ Security fixes - ``multipart/form-data`` requests are now limited to 100 parts by default, to prevent a denial-of-service attack via very large requests with many parts. This limit is configurable via `tornado.httputil.ParseMultipartConfig`. Multipart parsing can also be disabled completely - if not required for the application. Thanks to [0x-Apollyon](https://github.com/0x-Apollyon) and - [bekkaze](https://github.com/bekkaze) for reporting this issue. + if not required for the application. Thanks to `0x-Apollyon `_ and + `bekkaze `_ for reporting this issue. - The ``domain``, ``path``, and ``samesite`` arguments to `.RequestHandler.set_cookie` are now validated for illegal characters, which could be abused to inject other attributes on the cookie. Thanks to Dhiral Vyas (Praetorian) for reporting this issue. - Carriage return characters are no longer accepted in ``multipart/form-data`` headers. Thanks to - [sergeykochanov](https://github.com/sergeykochanov) for reporting this issue. \ No newline at end of file + `sergeykochanov `_ for reporting this issue. -- 2.47.3