)]}'
{"nova/console/websocketproxy.py":[{"author":{"_account_id":12092,"name":"Abel Lopez","email":"abelopez@cisco.com","username":"alopgeek"},"change_message_id":"f95086e9c688a75144d374787863aab728e684dd","unresolved":false,"context_lines":[{"line_number":83,"context_line":"        if \u0027:\u0027 in expected_origin_hostname:"},{"line_number":84,"context_line":"            e \u003d expected_origin_hostname"},{"line_number":85,"context_line":"            expected_origin_hostname \u003d e.split(\u0027:\u0027)[0]"},{"line_number":86,"context_line":"        origin_url \u003d self.headers.getheader(\u0027Origin\u0027)"},{"line_number":87,"context_line":"        # missing origin header indicates non-browser client which is OK"},{"line_number":88,"context_line":"        if origin_url is not None:"},{"line_number":89,"context_line":"            origin \u003d urlparse.urlparse(origin_url)"}],"source_content_type":"text/x-python","patch_set":3,"id":"1a26ad4f_04e4c90a","line":86,"updated":"2015-10-30 19:15:16.000000000","message":"Can someone explain when this would not be the same thing? We\u0027re comparing \u0027Host\u0027 and \u0027Origin\u0027 from the same header.\nIt seems that this will always fail open.","commit_id":"0ff674217024a59a79bf80ab752a5cbf7e94642c"}]}