- tornado.web.RequestHandler.set_header now properly sanitizes
input values to protect against header injection, response
splitting, etc. (it has always attempted to do this, but the
check was incorrect). Note that redirects, the most likely
source of such bugs, are protected by a separate check in
RequestHandler.redirect.
- Colored logging configuration in tornado.options is compatible
with Python 3.2.3 (and 3.3).
OBS-URL: https://build.opensuse.org/package/show/devel:languages:python/python-tornado?expand=0&rev=15
Bug fixes:
- Fixed handling of closed connections with the epoll
(i.e. Linux) IOLoop. Previously, closed connections could be
shut down too early, which most often manifested as “Stream
is closed” exceptions in SimpleAsyncHTTPClient.
- Fixed a case in which chunked responses could be closed
prematurely, leading to truncated output.
- IOStream.connect now reports errors more consistently via
logging and the close callback (this affects e.g. connections
to localhost on FreeBSD).
- IOStream.read_bytes again accepts both int and long arguments.
- PeriodicCallback no longer runs repeatedly when IOLoop
iterations complete faster than the resolution of time.time()
(mainly a problem on Windows).
Backwards-compatibility note
- Listening for IOLoop.ERROR alone is no longer sufficient for
detecting closed connections on an otherwise unused socket.
IOLoop.ERROR must always be used in combination with READ or
WRITE.
OBS-URL: https://build.opensuse.org/package/show/devel:languages:python/python-tornado?expand=0&rev=11
