1What's new in Tornado 4.2.1 2=========================== 3 4Jul 17, 2015 5------------ 6 7Security fix 8~~~~~~~~~~~~ 9 10* This release fixes a path traversal vulnerability in `.StaticFileHandler`, 11 in which files whose names *started with* the ``static_path`` directory 12 but were not actually *in* that directory could be accessed. 13