14
0

- Update to 2.2.1:

- tornado.web.RequestHandler.set_header now properly sanitizes
    input values to protect against header injection, response
    splitting, etc. (it has always attempted to do this, but the
    check was incorrect). Note that redirects, the most likely
    source of such bugs, are protected by a separate check in
    RequestHandler.redirect.
  - Colored logging configuration in tornado.options is compatible
    with Python 3.2.3 (and 3.3).

OBS-URL: https://build.opensuse.org/package/show/devel:languages:python/python-tornado?expand=0&rev=15
This commit is contained in:
Alexandre Rogoski
2012-04-24 11:07:52 +00:00
committed by Git OBS Bridge
parent 2f00930bde
commit 2a5f0d3843
4 changed files with 19 additions and 6 deletions

View File

@@ -1,3 +1,16 @@
-------------------------------------------------------------------
Tue Apr 24 11:01:28 UTC 2012 - alexandre@exatati.com.br
- Update to 2.2.1:
- tornado.web.RequestHandler.set_header now properly sanitizes
input values to protect against header injection, response
splitting, etc. (it has always attempted to do this, but the
check was incorrect). Note that redirects, the most likely
source of such bugs, are protected by a separate check in
RequestHandler.redirect.
- Colored logging configuration in tornado.options is compatible
with Python 3.2.3 (and 3.3).
-------------------------------------------------------------------
Wed Mar 21 18:51:00 UTC 2012 - saschpe@gmx.de