diff options
| author | wiz <wiz> | 2014-06-09 12:33:43 +0000 |
|---|---|---|
| committer | wiz <wiz> | 2014-06-09 12:33:43 +0000 |
| commit | 39899bd7374382ed41ffa8ac580730144e57efe0 (patch) | |
| tree | 16b46ee38e9922a1625da1b3c4cb123857597b1e /www/py-tornado/distinfo | |
| parent | 7e6667bfd4018967405a8e917f58b751ba5f9101 (diff) | |
| download | pkgsrc-39899bd7374382ed41ffa8ac580730144e57efe0.tar.gz | |
Update to 3.2.2:
Security fixes
~~~~~~~~~~~~~~
* The XSRF token is now encoded with a random mask on each request.
This makes it safe to include in compressed pages without being
vulnerable to the `BREACH attack <http://breachattack.com>`_.
This applies to most applications that use both the ``xsrf_cookies``
and ``gzip`` options (or have gzip applied by a proxy).
Backwards-compatibility notes
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
* If Tornado 3.2.2 is run at the same time as older versions on the same
domain, there is some potential for issues with the differing cookie
versions. The `.Application` setting ``xsrf_cookie_version=1`` can
be used for a transitional period to generate the older cookie format
on newer servers.
Other changes
~~~~~~~~~~~~~
* ``tornado.platform.asyncio`` is now compatible with ``trollius`` version 0.3.
Diffstat (limited to 'www/py-tornado/distinfo')
| -rw-r--r-- | www/py-tornado/distinfo | 8 |
1 files changed, 4 insertions, 4 deletions
diff --git a/www/py-tornado/distinfo b/www/py-tornado/distinfo index 414c1870055..9b88cdc0162 100644 --- a/www/py-tornado/distinfo +++ b/www/py-tornado/distinfo @@ -1,5 +1,5 @@ -$NetBSD: distinfo,v 1.4 2014/05/13 13:20:58 imil Exp $ +$NetBSD: distinfo,v 1.5 2014/06/09 12:33:43 wiz Exp $ -SHA1 (tornado-3.2.1.tar.gz) = ac94eb6202283b410d9c2a996e02a17711bf4231 -RMD160 (tornado-3.2.1.tar.gz) = 81016e74a17ee2aea40432128569693ced17b616 -Size (tornado-3.2.1.tar.gz) = 403419 bytes +SHA1 (tornado-3.2.2.tar.gz) = ede9603adcceaf1b6085fd5a973cec50c7391888 +RMD160 (tornado-3.2.2.tar.gz) = d1cd5f74dd32a618deb0c3e55661692a1c47f0de +Size (tornado-3.2.2.tar.gz) = 405596 bytes |