write()). Note that lists are not converted to JSON because of a potential cross-site security vulnerability. All JSON output should be wrapped in a dictionary. More details at http://haacked.com/archiv 7 What’s new in Tornado 6.3.2 May 13, 2023 Security improvements • Fixed an open redirect vulnerability in StaticFileHandler under certain configurations. 170 Chapter 6. DocumentationTornado Documentation What’s new in Tornado 4.2.1 Jul 17, 2015 Security fix • This release fixes a path traversal vulnerability in StaticFileHandler, in which files whose names started with the static_path directory but were

write()). Note that lists are not converted to JSON because of a potential cross-site security vulnerability. All JSON output should be wrapped in a dictionary. More details at http://haacked.com/archiv proxies.What’s new in Tornado 6.3.2 May 13, 2023 Security improvements Fixed an open redirect vulnerability in StaticFileHandler under certain configurations.What’s new in Tornado 6.3.1 Apr 21, 2023 tornado What’s new in Tornado 4.2.1 Jul 17, 2015 Security fix This release fixes a path traversal vulnerability in StaticFileHandler, in which files whose names started with the static_path directory but were