From 2279d4bcec1889f019adbb084f490998ccbc92f7 Mon Sep 17 00:00:00 2001 From: wiz Date: Mon, 9 Jun 2014 12:33:43 +0000 Subject: Update to 3.2.2: Security fixes ~~~~~~~~~~~~~~ * The XSRF token is now encoded with a random mask on each request. This makes it safe to include in compressed pages without being vulnerable to the `BREACH attack `_. This applies to most applications that use both the ``xsrf_cookies`` and ``gzip`` options (or have gzip applied by a proxy). Backwards-compatibility notes ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ * If Tornado 3.2.2 is run at the same time as older versions on the same domain, there is some potential for issues with the differing cookie versions. The `.Application` setting ``xsrf_cookie_version=1`` can be used for a transitional period to generate the older cookie format on newer servers. Other changes ~~~~~~~~~~~~~ * ``tornado.platform.asyncio`` is now compatible with ``trollius`` version 0.3. --- www/py-tornado/Makefile | 4 ++-- www/py-tornado/distinfo | 8 ++++---- 2 files changed, 6 insertions(+), 6 deletions(-) (limited to 'www') diff --git a/www/py-tornado/Makefile b/www/py-tornado/Makefile index e50b996384e..500b460bc29 100644 --- a/www/py-tornado/Makefile +++ b/www/py-tornado/Makefile @@ -1,6 +1,6 @@ -# $NetBSD: Makefile,v 1.5 2014/05/13 13:20:58 imil Exp $ +# $NetBSD: Makefile,v 1.6 2014/06/09 12:33:43 wiz Exp $ -DISTNAME= tornado-3.2.1 +DISTNAME= tornado-3.2.2 PKGNAME= ${PYPKGPREFIX}-${DISTNAME} CATEGORIES= www MASTER_SITES= http://pypi.python.org/packages/source/t/tornado/ diff --git a/www/py-tornado/distinfo b/www/py-tornado/distinfo index 414c1870055..9b88cdc0162 100644 --- a/www/py-tornado/distinfo +++ b/www/py-tornado/distinfo @@ -1,5 +1,5 @@ -$NetBSD: distinfo,v 1.4 2014/05/13 13:20:58 imil Exp $ +$NetBSD: distinfo,v 1.5 2014/06/09 12:33:43 wiz Exp $ -SHA1 (tornado-3.2.1.tar.gz) = ac94eb6202283b410d9c2a996e02a17711bf4231 -RMD160 (tornado-3.2.1.tar.gz) = 81016e74a17ee2aea40432128569693ced17b616 -Size (tornado-3.2.1.tar.gz) = 403419 bytes +SHA1 (tornado-3.2.2.tar.gz) = ede9603adcceaf1b6085fd5a973cec50c7391888 +RMD160 (tornado-3.2.2.tar.gz) = d1cd5f74dd32a618deb0c3e55661692a1c47f0de +Size (tornado-3.2.2.tar.gz) = 405596 bytes -- cgit v1.2.3