What’s new in Tornado 4.2.1¶
Jul 17, 2015¶
Security fix¶
- This release fixes a path traversal vulnerability in StaticFileHandler, in which files whose names started with the static_path directory but were not actually in that directory could be accessed.