)]}'
{"/COMMIT_MSG":[{"author":{"_account_id":15054,"name":"wangxiyuan","email":"wangxiyuan1007@gmail.com","username":"wangxiyuan"},"change_message_id":"0269493770c28f42abc512338ce8f9885df13baf","unresolved":false,"context_lines":[{"line_number":6,"context_line":""},{"line_number":7,"context_line":"Change log hashing to SHA256"},{"line_number":8,"context_line":""},{"line_number":9,"context_line":"With the recent Bandit update[0], the usage of SHA1 is now being"},{"line_number":10,"context_line":"tagged as an issue. This changes the hashing of logs to SHA256"},{"line_number":11,"context_line":"instead of SHA1."},{"line_number":12,"context_line":""}],"source_content_type":"text/x-gerrit-commit-message","patch_set":2,"id":"3f79a3b5_df9e6153","line":9,"range":{"start_line":9,"start_character":29,"end_line":9,"end_character":32},"updated":"2018-08-20 02:33:42.000000000","message":"where is it? lol","commit_id":"ccf6cb79033b2083d9177823094f7836eb68ae0d"}],"keystoneauth1/session.py":[{"author":{"_account_id":2903,"name":"Morgan Fainberg","email":"morgan.fainberg@gmail.com","username":"mdrnstm"},"change_message_id":"d3076a18666eaa6769c44b34330f9d488e1f3c88","unresolved":false,"context_lines":[{"line_number":365,"context_line":"        secure_headers \u003d (\u0027authorization\u0027, \u0027x-auth-token\u0027,"},{"line_number":366,"context_line":"                          \u0027x-subject-token\u0027, \u0027x-service-token\u0027)"},{"line_number":367,"context_line":"        if header[0].lower() in secure_headers:"},{"line_number":368,"context_line":"            # TODO(gagehugo): See if we can fix this rather than"},{"line_number":369,"context_line":"            # surpressing it."},{"line_number":370,"context_line":"            token_hasher \u003d hashlib.sha1()  # nosec"},{"line_number":371,"context_line":"            token_hasher.update(header[1].encode(\u0027utf-8\u0027))"},{"line_number":372,"context_line":"            token_hash \u003d token_hasher.hexdigest()"}],"source_content_type":"text/x-python","patch_set":1,"id":"3f79a3b5_3ed9ad21","line":369,"range":{"start_line":368,"start_character":0,"end_line":369,"end_character":29},"updated":"2018-08-17 16:58:00.000000000","message":"It is fine to suppress this, it is used exclusivly for logging purposes / obfuscating the token ID. Either comment that this is fine and why or modify the following line to be SHA256 and line 373 to say {SHA256} instead of {SHA1}.\n\nThere is no concern about collisions here since we aren\u0027t using this as a record anywhere, a collision just looks like a log would have a duplicate token. The benefit of generating said collision for the cost ~$100k in compute time (with full control of the data sets on both ends) seems pretty unlikely.\n\nThis is a debug log helper bit only","commit_id":"62b2f701bdacc8d6e462e565508281e874becbee"}]}