1What's new in Tornado 4.2.1
2===========================
3
4Jul 17, 2015
5------------
6
7Security fix
8~~~~~~~~~~~~
9
10* This release fixes a path traversal vulnerability in `.StaticFileHandler`,
11  in which files whose names *started with* the ``static_path`` directory
12  but were not actually *in* that directory could be accessed.
13