diff options
| author | wiz <wiz@pkgsrc.org> | 2014-06-09 12:33:43 +0000 |
|---|---|---|
| committer | wiz <wiz@pkgsrc.org> | 2014-06-09 12:33:43 +0000 |
| commit | 2279d4bcec1889f019adbb084f490998ccbc92f7 (patch) | |
| tree | 16b46ee38e9922a1625da1b3c4cb123857597b1e /www | |
| parent | 41aab8b5842f513725374e40ad2d1d2f66a6c386 (diff) | |
| download | pkgsrc-2279d4bcec1889f019adbb084f490998ccbc92f7.tar.gz | |
Update to 3.2.2:
Security fixes
~~~~~~~~~~~~~~
* The XSRF token is now encoded with a random mask on each request.
This makes it safe to include in compressed pages without being
vulnerable to the `BREACH attack <http://breachattack.com>`_.
This applies to most applications that use both the ``xsrf_cookies``
and ``gzip`` options (or have gzip applied by a proxy).
Backwards-compatibility notes
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
* If Tornado 3.2.2 is run at the same time as older versions on the same
domain, there is some potential for issues with the differing cookie
versions. The `.Application` setting ``xsrf_cookie_version=1`` can
be used for a transitional period to generate the older cookie format
on newer servers.
Other changes
~~~~~~~~~~~~~
* ``tornado.platform.asyncio`` is now compatible with ``trollius`` version 0.3.
Diffstat (limited to 'www')
| -rw-r--r-- | www/py-tornado/Makefile | 4 | ||||
| -rw-r--r-- | www/py-tornado/distinfo | 8 |
2 files changed, 6 insertions, 6 deletions
diff --git a/www/py-tornado/Makefile b/www/py-tornado/Makefile index e50b996384e..500b460bc29 100644 --- a/www/py-tornado/Makefile +++ b/www/py-tornado/Makefile @@ -1,6 +1,6 @@ -# $NetBSD: Makefile,v 1.5 2014/05/13 13:20:58 imil Exp $ +# $NetBSD: Makefile,v 1.6 2014/06/09 12:33:43 wiz Exp $ -DISTNAME= tornado-3.2.1 +DISTNAME= tornado-3.2.2 PKGNAME= ${PYPKGPREFIX}-${DISTNAME} CATEGORIES= www MASTER_SITES= http://pypi.python.org/packages/source/t/tornado/ diff --git a/www/py-tornado/distinfo b/www/py-tornado/distinfo index 414c1870055..9b88cdc0162 100644 --- a/www/py-tornado/distinfo +++ b/www/py-tornado/distinfo @@ -1,5 +1,5 @@ -$NetBSD: distinfo,v 1.4 2014/05/13 13:20:58 imil Exp $ +$NetBSD: distinfo,v 1.5 2014/06/09 12:33:43 wiz Exp $ -SHA1 (tornado-3.2.1.tar.gz) = ac94eb6202283b410d9c2a996e02a17711bf4231 -RMD160 (tornado-3.2.1.tar.gz) = 81016e74a17ee2aea40432128569693ced17b616 -Size (tornado-3.2.1.tar.gz) = 403419 bytes +SHA1 (tornado-3.2.2.tar.gz) = ede9603adcceaf1b6085fd5a973cec50c7391888 +RMD160 (tornado-3.2.2.tar.gz) = d1cd5f74dd32a618deb0c3e55661692a1c47f0de +Size (tornado-3.2.2.tar.gz) = 405596 bytes |