8000 Release v4.2.1: Tornado 4.2.1 · waylan/tornado · GitHub
[go: up one dir, main page]
More Web Proxy on the site http://driver.im/
Skip to content

v4.2.1

v4.2.1: Tornado 4.2.1
@bdarnell bdarnell tagged this 17 Jul 15:49 
Jul 17, 2015
------------

Security fix
~~~~~~~~~~~~

* This release fixes a path traversal vulnerability in `.StaticFileHandler`,
  in which files whose names *started with* the ``static_path`` directory
  but were not actually *in* that directory could be accessed.
Assets 2
Loading
0