)]}'
{"/PATCHSET_LEVEL":[{"author":{"_account_id":15334,"name":"Stephen Finucane","display_name":"stephenfin","email":"stephenfin@redhat.com","username":"sfinucan"},"change_message_id":"866fc6f8b6c3a49350f8796d3e0829f846235080","unresolved":false,"context_lines":[],"source_content_type":"","patch_set":1,"id":"264ab607_418541fe","updated":"2026-10-05 11:31:49.000000000","message":"Why are we adding a new option for a deprecated server class?","commit_id":"d85c1eba57a97a4b314e62844a1f10e203bd52c8"},{"author":{"_account_id":31245,"name":"Daniel Bengtsson","email":"dbengt@redhat.com","username":"damani42"},"change_message_id":"522c5a7bc397135aa76293cfb41a4488138b68da","unresolved":false,"context_lines":[],"source_content_type":"","patch_set":1,"id":"ab330493_da20d5fc","in_reply_to":"264ab607_418541fe","updated":"2026-10-05 12:37:53.000000000","message":"This addresses a denial-of-service risk in the existing server: clients can keep connections occupied indefinitely by sending partial headers within the socket idle timeout, eventually exhausting the connection pool.\nAlthough the server is deprecated, applications still using it remain exposed until they migrate. The new option bounds header reception time while allowing deployments to adjust the deadline or restore the previous behavior if needed. It is already marked for removal alongside the server.\nI agree with your documentation comment and will move the additional explanation into the option’s help text.","commit_id":"d85c1eba57a97a4b314e62844a1f10e203bd52c8"},{"author":{"_account_id":9816,"name":"Takashi Kajinami","email":"kajinamit@oss.nttdata.com","username":"kajinamit"},"change_message_id":"e4dcd26755773826510178b38d8946aca85b81ce","unresolved":true,"context_lines":[],"source_content_type":"","patch_set":1,"id":"f5516aef_d88baf16","in_reply_to":"ab330493_da20d5fc","updated":"2026-10-05 12:57:09.000000000","message":"I\u0027m against adding any new features to this deprecated module. If users think this is a large problem for them then they should really consider replacing standalone wsgi service by a different mechanism (For example you can use Timeout option in mod_wsgi).\nIf you think this is a large problem users should be aware of then just add a note describing this known issue.","commit_id":"d85c1eba57a97a4b314e62844a1f10e203bd52c8"}],"doc/source/configuration/index.rst":[{"author":{"_account_id":15334,"name":"Stephen Finucane","display_name":"stephenfin","email":"stephenfin@redhat.com","username":"sfinucan"},"change_message_id":"866fc6f8b6c3a49350f8796d3e0829f846235080","unresolved":true,"context_lines":[{"line_number":33,"context_line":"These options apply to services using the WSGI (Web Service Gateway"},{"line_number":34,"context_line":"Interface) module."},{"line_number":35,"context_line":""},{"line_number":36,"context_line":"``request_header_timeout`` limits the total time spent receiving the request"},{"line_number":37,"context_line":"line and headers to 30 seconds by default. Sending additional bytes does not"},{"line_number":38,"context_line":"extend this deadline. A connection that exceeds it is closed without a response,"},{"line_number":39,"context_line":"freeing its slot in the server\u0027s connection pool."},{"line_number":40,"context_line":""},{"line_number":41,"context_line":"The deadline applies separately to every request, including waiting for the"},{"line_number":42,"context_line":"first byte on an idle keep-alive connection. It is cancelled once the headers"},{"line_number":43,"context_line":"have been parsed, so it does not limit uploads or application response times."},{"line_number":44,"context_line":"``client_socket_timeout`` continues to control individual socket operations."},{"line_number":45,"context_line":""},{"line_number":46,"context_line":"Increase ``request_header_timeout`` if legitimate clients need more time to"},{"line_number":47,"context_line":"send their headers. Setting it to ``0`` restores the previous behavior and"},{"line_number":48,"context_line":"disables this protection against slow header reception. This deadline does not"},{"line_number":49,"context_line":"protect against slow request bodies or replace connection limits in a proxy."},{"line_number":50,"context_line":""},{"line_number":51,"context_line":".. show-options:: oslo.service.wsgi"}],"source_content_type":"text/x-rst","patch_set":1,"id":"cb330e8f_bf39c481","line":49,"range":{"start_line":36,"start_character":0,"end_line":49,"end_character":76},"updated":"2026-10-05 11:31:49.000000000","message":"This doesn\u0027t belong here. It should be pulled automatically via the `show-options` directive below. If you need to provide more context, you can do so via the option\u0027s `help` attr","commit_id":"d85c1eba57a97a4b314e62844a1f10e203bd52c8"}]}