Jul 17, 2015
Security fix
- This release fixes a path traversal vulnerability in
StaticFileHandler
, in which files whose names started with thestatic_path
directory but were not actually in that directory could be accessed.
StaticFileHandler
,
in which files whose names started with the static_path
directory
but were not actually in that directory could be accessed.