What’s new in Tornado 6.3.3¶
Aug 11, 2023¶
Security improvements¶
The
Content-Length
header andchunked
Transfer-Encoding
sizes are now parsed more strictly (according to the relevant RFCs) to avoid potential request-smuggling vulnerabilities when deployed behind certain proxies.