more detail added

tableau · Oct 3, 2022 · b43d8cf · b43d8cf
1 parent 7f3b4c4
commit b43d8cf
Showing 1 changed file with 3 additions and 1 deletion.
diff --git a/docs/security.md b/docs/security.md
@@ -18,4 +18,6 @@ you may want to consider the following as you use TabPy:
   /evaluate endpoint. To disable /evaluate endpoint, set "TABPY_EVALUATE_ENABLE"
   to false in config file.
 - Always use the most up-to-date version of Python.
-  Using earlier versions can leave scripts vulnerable to malicious attacks.
+  TabPy relies on Tornado and if older verions of Python are used with Tornado
+  then malicious users can potentially poison python server web caches
+  with parameter cloaking.