)]}'
{"id":"openstack%2Fopenstack-helm~605812","triplet_id":"openstack%2Fopenstack-helm~master~I98169973410bc1dce779ac1e870256b9a45d2cc8","project":"openstack/openstack-helm","branch":"master","hashtags":[],"change_id":"I98169973410bc1dce779ac1e870256b9a45d2cc8","subject":"Horizon: HTTP Verb Tampering vulnerability fix","status":"MERGED","created":"2018-09-27 17:07:39.000000000","updated":"2018-10-01 07:34:14.000000000","submitted":"2018-10-01 07:34:14.000000000","submitter":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"total_comment_count":0,"unresolved_comment_count":0,"has_review_started":true,"submission_id":"605812-1538379254818-eb35b5d7","meta_rev_id":"172a8a6866f9f2d5b2a63ef0c2577d6b1a989b20","_number":605812,"virtual_id_number":605812,"owner":{"_account_id":17119,"name":"Dmitrii Kabanov","email":"dmitrii.kabanov@att.com","username":"dk370c"},"actions":{},"labels":{"Verified":{"approved":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"all":[{"value":0,"_account_id":28162,"name":"Ruslan Khanbikov","email":"rkhanbikov@gmail.com","username":"rkhanbikov"},{"value":0,"_account_id":8898,"name":"Chris Wedgwood","email":"cw@f00f.org","username":"anticw"},{"value":0,"_account_id":20469,"name":"Tin Lam","email":"tinlam@gmail.com"},{"value":2,"date":"2018-10-01 07:34:14.000000000","post_submit":true,"permitted_voting_range":{"min":2,"max":2},"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},{"value":0,"_account_id":27340,"name":"Jared Miller","email":"jmiller@mirantis.com","username":"grawk"},{"value":0,"_account_id":17966,"name":"Steven Wilkerson","email":"srwilkers@outlook.com","username":"srwilker"},{"value":0,"_account_id":17119,"name":"Dmitrii Kabanov","email":"dmitrii.kabanov@att.com","username":"dk370c"}],"values":{"-2":"Fails","-1":"Doesn\u0027t seem to work"," 0":"No score","+1":"Works for me","+2":"Verified"},"description":"","default_value":0,"optional":true},"Code-Review":{"approved":{"_account_id":8898,"name":"Chris Wedgwood","email":"cw@f00f.org","username":"anticw"},"all":[{"value":0,"_account_id":28162,"name":"Ruslan Khanbikov","email":"rkhanbikov@gmail.com","username":"rkhanbikov"},{"value":2,"date":"2018-10-01 06:27:06.000000000","permitted_voting_range":{"min":2,"max":2},"_account_id":8898,"name":"Chris Wedgwood","email":"cw@f00f.org","username":"anticw"},{"value":0,"_account_id":20469,"name":"Tin Lam","email":"tinlam@gmail.com"},{"value":0,"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},{"value":1,"date":"2018-09-28 20:30:43.000000000","permitted_voting_range":{"min":1,"max":1},"_account_id":27340,"name":"Jared Miller","email":"jmiller@mirantis.com","username":"grawk"},{"value":0,"_account_id":17966,"name":"Steven Wilkerson","email":"srwilkers@outlook.com","username":"srwilker"},{"value":0,"_account_id":17119,"name":"Dmitrii Kabanov","email":"dmitrii.kabanov@att.com","username":"dk370c"}],"values":{"-2":"Do not merge","-1":"This patch needs further work before it can be merged"," 0":"No score","+1":"Looks good to me, but someone else must approve","+2":"Looks good to me (core reviewer)"},"description":"","default_value":0,"optional":true},"Workflow":{"approved":{"_account_id":8898,"name":"Chris Wedgwood","email":"cw@f00f.org","username":"anticw"},"all":[{"value":0,"_account_id":28162,"name":"Ruslan Khanbikov","email":"rkhanbikov@gmail.com","username":"rkhanbikov"},{"value":1,"date":"2018-10-01 06:27:06.000000000","permitted_voting_range":{"min":1,"max":1},"_account_id":8898,"name":"Chris Wedgwood","email":"cw@f00f.org","username":"anticw"},{"value":0,"_account_id":20469,"name":"Tin Lam","email":"tinlam@gmail.com"},{"value":0,"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},{"value":0,"_account_id":27340,"name":"Jared Miller","email":"jmiller@mirantis.com","username":"grawk"},{"value":0,"date":"2018-09-28 19:38:31.000000000","_account_id":17966,"name":"Steven Wilkerson","email":"srwilkers@outlook.com","username":"srwilker"},{"value":0,"_account_id":17119,"name":"Dmitrii Kabanov","email":"dmitrii.kabanov@att.com","username":"dk370c"}],"values":{"-1":"Work in progress"," 0":"Ready for reviews","+1":"Approved"},"description":"","default_value":0,"optional":true}},"removable_reviewers":[],"reviewers":{"REVIEWER":[{"_account_id":8898,"name":"Chris Wedgwood","email":"cw@f00f.org","username":"anticw"},{"_account_id":17119,"name":"Dmitrii Kabanov","email":"dmitrii.kabanov@att.com","username":"dk370c"},{"_account_id":17966,"name":"Steven Wilkerson","email":"srwilkers@outlook.com","username":"srwilker"},{"_account_id":20469,"name":"Tin Lam","email":"tinlam@gmail.com"},{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},{"_account_id":27340,"name":"Jared Miller","email":"jmiller@mirantis.com","username":"grawk"},{"_account_id":28162,"name":"Ruslan Khanbikov","email":"rkhanbikov@gmail.com","username":"rkhanbikov"}]},"pending_reviewers":{},"reviewer_updates":[{"updated":"2018-09-28 18:35:05.000000000","updated_by":{"_account_id":28162,"name":"Ruslan Khanbikov","email":"rkhanbikov@gmail.com","username":"rkhanbikov"},"reviewer":{"_account_id":28162,"name":"Ruslan Khanbikov","email":"rkhanbikov@gmail.com","username":"rkhanbikov"},"state":"REVIEWER"},{"updated":"2018-09-28 18:36:17.000000000","updated_by":{"_account_id":20469,"name":"Tin Lam","email":"tinlam@gmail.com"},"reviewer":{"_account_id":20469,"name":"Tin Lam","email":"tinlam@gmail.com"},"state":"REVIEWER"},{"updated":"2018-09-28 19:38:31.000000000","updated_by":{"_account_id":17966,"name":"Steven Wilkerson","email":"srwilkers@outlook.com","username":"srwilker"},"reviewer":{"_account_id":17966,"name":"Steven Wilkerson","email":"srwilkers@outlook.com","username":"srwilker"},"state":"REVIEWER"},{"updated":"2018-09-28 20:30:43.000000000","updated_by":{"_account_id":27340,"name":"Jared Miller","email":"jmiller@mirantis.com","username":"grawk"},"reviewer":{"_account_id":27340,"name":"Jared Miller","email":"jmiller@mirantis.com","username":"grawk"},"state":"REVIEWER"},{"updated":"2018-10-01 06:27:06.000000000","updated_by":{"_account_id":8898,"name":"Chris Wedgwood","email":"cw@f00f.org","username":"anticw"},"reviewer":{"_account_id":8898,"name":"Chris Wedgwood","email":"cw@f00f.org","username":"anticw"},"state":"REVIEWER"},{"updated":"2018-10-01 07:34:14.000000000","updated_by":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"reviewer":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"state":"REVIEWER"}],"messages":[{"id":"9fc1d9a8a9740ca47ad1b3b505ae850108eacfc6","author":{"_account_id":17119,"name":"Dmitrii Kabanov","email":"dmitrii.kabanov@att.com","username":"dk370c"},"date":"2018-09-27 17:07:39.000000000","message":"Uploaded patch set 1.","accounts_in_message":[],"_revision_number":1},{"id":"d5cc51834232a81ad14b0b306c60aebb316ed865","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2018-09-28 00:38:21.000000000","message":"Patch Set 1: Verified+1\n\nBuild succeeded (check pipeline).\n\n- openstack-tox-docs http://logs.openstack.org/12/605812/1/check/openstack-tox-docs/19b0873/html/ : SUCCESS in 3m 32s\n- openstack-helm-linter http://logs.openstack.org/12/605812/1/check/openstack-helm-linter/d307627/ : SUCCESS in 1m 26s\n- openstack-helm-dev-deploy-ceph-swift-ovs http://logs.openstack.org/12/605812/1/check/openstack-helm-dev-deploy-ceph-swift-ovs/2a89f89/ : SUCCESS in 58m 05s\n- openstack-helm-dev-deploy-ceph-radosgw-ovs http://logs.openstack.org/12/605812/1/check/openstack-helm-dev-deploy-ceph-radosgw-ovs/4540ca9/ : SUCCESS in 57m 09s\n- openstack-helm-dev-deploy-ceph-rbd-ovs http://logs.openstack.org/12/605812/1/check/openstack-helm-dev-deploy-ceph-rbd-ovs/9b0369f/ : SUCCESS in 1h 04m 21s\n- openstack-helm-dev-deploy-nfs-ovs http://logs.openstack.org/12/605812/1/check/openstack-helm-dev-deploy-nfs-ovs/c5b488e/ : SUCCESS in 47m 48s\n- openstack-helm-dev-deploy-ceph-lb http://logs.openstack.org/12/605812/1/check/openstack-helm-dev-deploy-ceph-lb/682056c/ : SUCCESS in 57m 11s (non-voting)\n- openstack-helm-dev-deploy-nfs-lb http://logs.openstack.org/12/605812/1/check/openstack-helm-dev-deploy-nfs-lb/0203d8b/ : SUCCESS in 49m 10s (non-voting)\n- openstack-helm-dev-deploy-nfs-ldap http://logs.openstack.org/12/605812/1/check/openstack-helm-dev-deploy-nfs-ldap/8c276b2/ : SUCCESS in 50m 20s (non-voting)\n- openstack-helm-multinode-ubuntu http://logs.openstack.org/12/605812/1/check/openstack-helm-multinode-ubuntu/e7e6240/ : SUCCESS in 1h 51m 57s (non-voting)\n- openstack-helm-ironic-ubuntu http://logs.openstack.org/12/605812/1/check/openstack-helm-ironic-ubuntu/b14716d/ : SUCCESS in 1h 08m 30s (non-voting)\n- openstack-helm-armada-fullstack-deploy http://logs.openstack.org/12/605812/1/check/openstack-helm-armada-fullstack-deploy/d4cc266/ : POST_FAILURE in 1h 27m 14s (non-voting)\n- openstack-helm-kolla-deploy-ceph-ovs http://logs.openstack.org/12/605812/1/check/openstack-helm-kolla-deploy-ceph-ovs/cc6dd0f/ : SUCCESS in 58m 04s\n- openstack-helm-ocata-loci-deploy-ceph http://logs.openstack.org/12/605812/1/check/openstack-helm-ocata-loci-deploy-ceph/ab9883d/ : SUCCESS in 1h 21m 25s (non-voting)\n- openstack-helm-ocata-kolla-deploy-ceph http://logs.openstack.org/12/605812/1/check/openstack-helm-ocata-kolla-deploy-ceph/295634b/ : SUCCESS in 1h 08m 43s (non-voting)\n- openstack-helm-pike-loci-deploy-ceph http://logs.openstack.org/12/605812/1/check/openstack-helm-pike-loci-deploy-ceph/154e604/ : SUCCESS in 1h 03m 02s (non-voting)\n- openstack-helm-pike-kolla-deploy-ceph http://logs.openstack.org/12/605812/1/check/openstack-helm-pike-kolla-deploy-ceph/7badd93/ : SUCCESS in 57m 59s (non-voting)","accounts_in_message":[],"_revision_number":1},{"id":"a273f3cb97fa1cbde0ae5deadc5ee276070c6e34","author":{"_account_id":28162,"name":"Ruslan Khanbikov","email":"rkhanbikov@gmail.com","username":"rkhanbikov"},"date":"2018-09-28 18:35:05.000000000","message":"Patch Set 1: Code-Review-1\n\nCould you please correct a commit message like \"Horizon: HTTP verb.....\" and add a link to the vulnerability explanation.","accounts_in_message":[],"_revision_number":1},{"id":"5b835ac261300fe64ef759427e3ba0a0e09ab953","author":{"_account_id":17119,"name":"Dmitrii Kabanov","email":"dmitrii.kabanov@att.com","username":"dk370c"},"date":"2018-09-28 18:37:15.000000000","message":"Patch Set 1:\n\nSure. I will update soon.","accounts_in_message":[],"_revision_number":1},{"id":"73b5c5df8ab449ea51bc7c5c82d1b22cf0660187","author":{"_account_id":17119,"name":"Dmitrii Kabanov","email":"dmitrii.kabanov@att.com","username":"dk370c"},"date":"2018-09-28 19:35:03.000000000","message":"Uploaded patch set 2.","accounts_in_message":[],"_revision_number":2},{"id":"22c6dc14d9250feb3e44f97f42a2697cd320c249","author":{"_account_id":27340,"name":"Jared Miller","email":"jmiller@mirantis.com","username":"grawk"},"date":"2018-09-28 20:30:43.000000000","message":"Patch Set 2: Code-Review+1","accounts_in_message":[],"_revision_number":2},{"id":"aa3ac0229d5e9d22326ebf0ea7142de438280bb1","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2018-09-28 23:20:52.000000000","message":"Patch Set 2: Verified+1\n\nBuild succeeded (check pipeline).\n\n- openstack-tox-docs http://logs.openstack.org/12/605812/2/check/openstack-tox-docs/08317c5/html/ : SUCCESS in 3m 40s\n- openstack-helm-linter http://logs.openstack.org/12/605812/2/check/openstack-helm-linter/cdaea7e/ : SUCCESS in 1m 27s\n- openstack-helm-dev-deploy-ceph-swift-ovs http://logs.openstack.org/12/605812/2/check/openstack-helm-dev-deploy-ceph-swift-ovs/f21cfb5/ : SUCCESS in 59m 20s\n- openstack-helm-dev-deploy-ceph-radosgw-ovs http://logs.openstack.org/12/605812/2/check/openstack-helm-dev-deploy-ceph-radosgw-ovs/db9d4ee/ : SUCCESS in 58m 47s\n- openstack-helm-dev-deploy-ceph-rbd-ovs http://logs.openstack.org/12/605812/2/check/openstack-helm-dev-deploy-ceph-rbd-ovs/fa4aa17/ : SUCCESS in 55m 21s\n- openstack-helm-dev-deploy-nfs-ovs http://logs.openstack.org/12/605812/2/check/openstack-helm-dev-deploy-nfs-ovs/b4fa643/ : SUCCESS in 45m 24s\n- openstack-helm-dev-deploy-ceph-lb http://logs.openstack.org/12/605812/2/check/openstack-helm-dev-deploy-ceph-lb/37b7046/ : SUCCESS in 1h 02m 49s (non-voting)\n- openstack-helm-dev-deploy-nfs-lb http://logs.openstack.org/12/605812/2/check/openstack-helm-dev-deploy-nfs-lb/3bb0b37/ : SUCCESS in 47m 21s (non-voting)\n- openstack-helm-dev-deploy-nfs-ldap http://logs.openstack.org/12/605812/2/check/openstack-helm-dev-deploy-nfs-ldap/9454967/ : SUCCESS in 47m 33s (non-voting)\n- openstack-helm-multinode-ubuntu http://logs.openstack.org/12/605812/2/check/openstack-helm-multinode-ubuntu/6555c57/ : SUCCESS in 1h 38m 30s (non-voting)\n- openstack-helm-ironic-ubuntu http://logs.openstack.org/12/605812/2/check/openstack-helm-ironic-ubuntu/b19167f/ : SUCCESS in 1h 03m 25s (non-voting)\n- openstack-helm-armada-fullstack-deploy http://logs.openstack.org/12/605812/2/check/openstack-helm-armada-fullstack-deploy/c4bfe4e/ : POST_FAILURE in 1h 45m 08s (non-voting)\n- openstack-helm-kolla-deploy-ceph-ovs http://logs.openstack.org/12/605812/2/check/openstack-helm-kolla-deploy-ceph-ovs/2c3c49c/ : SUCCESS in 1h 01m 25s\n- openstack-helm-ocata-loci-deploy-ceph http://logs.openstack.org/12/605812/2/check/openstack-helm-ocata-loci-deploy-ceph/1f79828/ : SUCCESS in 1h 00m 21s (non-voting)\n- openstack-helm-ocata-kolla-deploy-ceph http://logs.openstack.org/12/605812/2/check/openstack-helm-ocata-kolla-deploy-ceph/4388b89/ : SUCCESS in 1h 04m 55s (non-voting)\n- openstack-helm-pike-loci-deploy-ceph http://logs.openstack.org/12/605812/2/check/openstack-helm-pike-loci-deploy-ceph/7ec1352/ : SUCCESS in 59m 10s (non-voting)\n- openstack-helm-pike-kolla-deploy-ceph http://logs.openstack.org/12/605812/2/check/openstack-helm-pike-kolla-deploy-ceph/bf6e7b9/ : SUCCESS in 1h 08m 48s (non-voting)","accounts_in_message":[],"_revision_number":2},{"id":"bcf776d0c12df9235f05d25d2ccf241c98713cf7","author":{"_account_id":8898,"name":"Chris Wedgwood","email":"cw@f00f.org","username":"anticw"},"date":"2018-10-01 06:27:06.000000000","message":"Patch Set 2: Code-Review+2 Workflow+1","accounts_in_message":[],"_revision_number":2},{"id":"94f4ab63575737b531e122478110cdb30add96c3","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2018-10-01 06:27:18.000000000","message":"Patch Set 2: -Verified\n\nStarting gate jobs.","accounts_in_message":[],"_revision_number":2},{"id":"d01def13ab5aaf509a74b73b889de3a6891b7336","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2018-10-01 07:34:14.000000000","message":"Change has been successfully merged by Zuul","accounts_in_message":[],"_revision_number":2},{"id":"172a8a6866f9f2d5b2a63ef0c2577d6b1a989b20","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2018-10-01 07:34:14.000000000","message":"Patch Set 2: Verified+2\n\nBuild succeeded (gate pipeline).\n\n- openstack-tox-docs http://logs.openstack.org/12/605812/2/gate/openstack-tox-docs/b53a1f3/html/ : SUCCESS in 4m 02s\n- openstack-helm-linter http://logs.openstack.org/12/605812/2/gate/openstack-helm-linter/fedd9f6/ : SUCCESS in 2m 15s\n- openstack-helm-dev-deploy-ceph-swift-ovs http://logs.openstack.org/12/605812/2/gate/openstack-helm-dev-deploy-ceph-swift-ovs/e69d39a/ : SUCCESS in 59m 07s\n- openstack-helm-dev-deploy-ceph-radosgw-ovs http://logs.openstack.org/12/605812/2/gate/openstack-helm-dev-deploy-ceph-radosgw-ovs/6980269/ : SUCCESS in 59m 25s\n- openstack-helm-dev-deploy-ceph-rbd-ovs http://logs.openstack.org/12/605812/2/gate/openstack-helm-dev-deploy-ceph-rbd-ovs/ef5e089/ : SUCCESS in 59m 36s\n- openstack-helm-dev-deploy-nfs-ovs http://logs.openstack.org/12/605812/2/gate/openstack-helm-dev-deploy-nfs-ovs/be90178/ : SUCCESS in 47m 34s\n- openstack-helm-kolla-deploy-ceph-ovs http://logs.openstack.org/12/605812/2/gate/openstack-helm-kolla-deploy-ceph-ovs/4ee7560/ : SUCCESS in 1h 01m 55s","accounts_in_message":[],"_revision_number":2}],"current_revision_number":2,"current_revision":"b8eb8b35810e8379e6f0560eb7c2883afd6798f8","revisions":{"073cc2750d9fca479ab3f07ddf643bc1f8ed3e71":{"kind":"REWORK","_number":1,"created":"2018-09-27 17:07:39.000000000","uploader":{"_account_id":17119,"name":"Dmitrii Kabanov","email":"dmitrii.kabanov@att.com","username":"dk370c"},"ref":"refs/changes/12/605812/1","fetch":{"anonymous http":{"url":"https://review.opendev.org/openstack/openstack-helm","ref":"refs/changes/12/605812/1","commands":{"Checkout":"git fetch https://review.opendev.org/openstack/openstack-helm refs/changes/12/605812/1 \u0026\u0026 git checkout FETCH_HEAD","Cherry Pick":"git fetch https://review.opendev.org/openstack/openstack-helm refs/changes/12/605812/1 \u0026\u0026 git cherry-pick FETCH_HEAD","Format Patch":"git fetch https://review.opendev.org/openstack/openstack-helm refs/changes/12/605812/1 \u0026\u0026 git format-patch -1 --stdout FETCH_HEAD","Pull":"git pull https://review.opendev.org/openstack/openstack-helm refs/changes/12/605812/1"}}},"commit":{"parents":[{"commit":"8e4ee070e65d54e2e5aa23b03febfac281278bf3","subject":"SRIOV: Set sriov device mtu","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/openstack-helm/commit/8e4ee070e65d54e2e5aa23b03febfac281278bf3"}]}],"author":{"name":"Dmitrii Kabanov","email":"dk370c@att.com","date":"2018-09-27 16:46:52.000000000","tz":-420},"committer":{"name":"Dmitrii Kabanov","email":"dk370c@att.com","date":"2018-09-27 17:06:29.000000000","tz":-420},"subject":"HTTP Verb Tampering vulnerability fix","message":"HTTP Verb Tampering vulnerability fix\n\nThe patch fixes the HTTP verb tampering issue. The idea is to disable\nunnecessary HTTP methods for the Horizon.\n\nChange-Id: I98169973410bc1dce779ac1e870256b9a45d2cc8\n","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/openstack-helm/commit/073cc2750d9fca479ab3f07ddf643bc1f8ed3e71"}],"resolve_conflicts_web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/openstack-helm/commit/073cc2750d9fca479ab3f07ddf643bc1f8ed3e71"}]},"branch":"refs/heads/master"},"b8eb8b35810e8379e6f0560eb7c2883afd6798f8":{"kind":"TRIVIAL_REBASE_WITH_MESSAGE_UPDATE","_number":2,"created":"2018-09-28 19:35:03.000000000","uploader":{"_account_id":17119,"name":"Dmitrii Kabanov","email":"dmitrii.kabanov@att.com","username":"dk370c"},"ref":"refs/changes/12/605812/2","fetch":{"anonymous http":{"url":"https://review.opendev.org/openstack/openstack-helm","ref":"refs/changes/12/605812/2","commands":{"Checkout":"git fetch https://review.opendev.org/openstack/openstack-helm refs/changes/12/605812/2 \u0026\u0026 git checkout FETCH_HEAD","Cherry Pick":"git fetch https://review.opendev.org/openstack/openstack-helm refs/changes/12/605812/2 \u0026\u0026 git cherry-pick FETCH_HEAD","Format Patch":"git fetch https://review.opendev.org/openstack/openstack-helm refs/changes/12/605812/2 \u0026\u0026 git format-patch -1 --stdout FETCH_HEAD","Pull":"git pull https://review.opendev.org/openstack/openstack-helm refs/changes/12/605812/2"}}},"commit":{"parents":[{"commit":"c573ba198f0cc2e4fbcea806e9c737074d854cd5","subject":"Merge \"Imported Translations from Zanata\"","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/openstack-helm/commit/c573ba198f0cc2e4fbcea806e9c737074d854cd5"}]}],"author":{"name":"Dmitrii Kabanov","email":"dk370c@att.com","date":"2018-09-27 16:46:52.000000000","tz":-420},"committer":{"name":"Dmitrii Kabanov","email":"dk370c@att.com","date":"2018-09-28 19:12:41.000000000","tz":-420},"subject":"Horizon: HTTP Verb Tampering vulnerability fix","message":"Horizon: HTTP Verb Tampering vulnerability fix\n\nThe patch fixes the HTTP verb tampering issue. The idea is to disable\nunnecessary HTTP methods for the Horizon. You can find a link to\nthe description [0] and a link to the White Paper [1] below:\n\nCAPEC-274: HTTP Verb Tampering\n[0] https://capec.mitre.org/data/definitions/274.html\n\nBypassing Web Authentication and Authorization with HTTP Verb Tampering\n(Bypassing_VBAAC_with_HTTP_Verb_Tampering.pdf)\n[1] https://dl.packetstormsecurity.net/papers/web/Bypassing_VBAAC_with_HTTP_Verb_Tampering.pdf\n\nChange-Id: I98169973410bc1dce779ac1e870256b9a45d2cc8\n","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/openstack-helm/commit/b8eb8b35810e8379e6f0560eb7c2883afd6798f8"}],"resolve_conflicts_web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/openstack-helm/commit/b8eb8b35810e8379e6f0560eb7c2883afd6798f8"}]},"branch":"refs/heads/master"}},"requirements":[],"submit_records":[],"submit_requirements":[]}