Tornado 3.2.2 新特性¶

June 3, 2014¶

Security fixes¶

• The XSRF token is now encoded with a random mask on each request.This makes it safe to include in compressed pages without beingvulnerable to the BREACH attack.This applies to most applications that use both the xsrf_cookiesand gzip options (or have gzip applied by a proxy).

Backwards-compatibility notes¶

• If Tornado 3.2.2 is run at the same time as older versions on the samedomain, there is some potential for issues with the differing cookieversions. The Application setting xsrf_cookie_version=1 canbe used for a transitional period to generate the older cookie formaton newer servers.

Other changes¶

• tornado.platform.asyncio is now compatible with trollius version 0.3.

原文:

https://tornado-zh-cn.readthedocs.io/zh_CN/latest/releases/v3.2.2.html