)]}'
{"/COMMIT_MSG":[{"author":{"_account_id":8449,"name":"Marios Andreou","email":"marios.andreou@gmail.com","username":"marios"},"change_message_id":"13b5d93c17bd8b0bafc7804ee22ac0e66aed707a","unresolved":false,"context_lines":[{"line_number":8,"context_line":""},{"line_number":9,"context_line":"Right now, the only manipulation done to the X-Forwarded-Proto header"},{"line_number":10,"context_line":"is done if an SSL connection is established. This is not sufficient as"},{"line_number":11,"context_line":"one might be able to erroneously put values through that header."},{"line_number":12,"context_line":""},{"line_number":13,"context_line":"This patch disables that behaviour by defaulting to plain http if an"},{"line_number":14,"context_line":"SSL connection is not established."}],"source_content_type":"text/x-gerrit-commit-message","patch_set":2,"id":"bae84128_cfbdcd69","line":11,"updated":"2016-02-23 11:24:27.000000000","message":"do you mean that a user may currently in error set the X-Forwarded-Proto to \u0027https\u0027 when in fact they aren\u0027t running ssl frontends for heat/keystone/cinder/nova","commit_id":"5f915a88e7c4eec6e6a0341808f0fbc4a4b1a161"}]}