)]}'
{"/COMMIT_MSG":[{"author":{"_account_id":14288,"name":"Matthew Thode","display_name":"prometheanfire","email":"mthode@mthode.org","username":"prometheanfire"},"change_message_id":"7177ba7720729df61f126c027e1e1fcb03a3ae7b","unresolved":false,"context_lines":[{"line_number":35,"context_line":""},{"line_number":36,"context_line":"Is the function of this library already covered by other libraries in global-requirements.txt?"},{"line_number":37,"context_line":""},{"line_number":38,"context_line":"No."},{"line_number":39,"context_line":""},{"line_number":40,"context_line":"Is the library required for OpenStack project or related dev or infrastructure setup? (Answer to this should be Yes, of course) Which?"},{"line_number":41,"context_line":""}],"source_content_type":"text/x-gerrit-commit-message","patch_set":1,"id":"3f79a3b5_c1295537","line":38,"updated":"2018-08-22 17:44:04.000000000","message":"It looks like it\u0027s needed by older django impls, \u003c 1.10\nMaster is currently set to use django 1.11.14 for py2 and 2.0.7 for py3\n\nI\u0027d say that this is covered by the what we have defined.  Horizon also has a lower-constraint of 1.11, so it disallows installing less than that version.","commit_id":"c36f37817bed2e8e6b7a73466755a144cc5443f2"},{"author":{"_account_id":22259,"name":"Nishant Kumar","email":"nishant.e.kumar@att.com","username":"nishant.e.kumar"},"change_message_id":"a25bd3bd6bb4e64f0922b2174dda466d00493778","unresolved":false,"context_lines":[{"line_number":35,"context_line":""},{"line_number":36,"context_line":"Is the function of this library already covered by other libraries in global-requirements.txt?"},{"line_number":37,"context_line":""},{"line_number":38,"context_line":"No."},{"line_number":39,"context_line":""},{"line_number":40,"context_line":"Is the library required for OpenStack project or related dev or infrastructure setup? (Answer to this should be Yes, of course) Which?"},{"line_number":41,"context_line":""}],"source_content_type":"text/x-gerrit-commit-message","patch_set":1,"id":"3f79a3b5_e18fb120","line":38,"in_reply_to":"3f79a3b5_c1295537","updated":"2018-08-22 17:55:23.000000000","message":"There are 2 different techniques used by this library to mitigate breach attacks. One of them is CSRF token which is available in new django impls. Therefore this won\u0027t be enabled.\n\nThe other one is the content length modification which is not supported by new Django impls so this feature will be enabled.","commit_id":"c36f37817bed2e8e6b7a73466755a144cc5443f2"},{"author":{"_account_id":14288,"name":"Matthew Thode","display_name":"prometheanfire","email":"mthode@mthode.org","username":"prometheanfire"},"change_message_id":"7177ba7720729df61f126c027e1e1fcb03a3ae7b","unresolved":false,"context_lines":[{"line_number":39,"context_line":""},{"line_number":40,"context_line":"Is the library required for OpenStack project or related dev or infrastructure setup? (Answer to this should be Yes, of course) Which?"},{"line_number":41,"context_line":""},{"line_number":42,"context_line":"Yes, this is needed for Projects based on Django."},{"line_number":43,"context_line":""},{"line_number":44,"context_line":"If the library release is managed by the Openstack release process does it use the cycle-with-intermediary release type?"},{"line_number":45,"context_line":""}],"source_content_type":"text/x-gerrit-commit-message","patch_set":1,"id":"3f79a3b5_6122c154","line":42,"updated":"2018-08-22 17:44:04.000000000","message":"Which openstack projects?  Can you link to a bug or review stating why this is needed?","commit_id":"c36f37817bed2e8e6b7a73466755a144cc5443f2"},{"author":{"_account_id":22259,"name":"Nishant Kumar","email":"nishant.e.kumar@att.com","username":"nishant.e.kumar"},"change_message_id":"a25bd3bd6bb4e64f0922b2174dda466d00493778","unresolved":false,"context_lines":[{"line_number":39,"context_line":""},{"line_number":40,"context_line":"Is the library required for OpenStack project or related dev or infrastructure setup? (Answer to this should be Yes, of course) Which?"},{"line_number":41,"context_line":""},{"line_number":42,"context_line":"Yes, this is needed for Projects based on Django."},{"line_number":43,"context_line":""},{"line_number":44,"context_line":"If the library release is managed by the Openstack release process does it use the cycle-with-intermediary release type?"},{"line_number":45,"context_line":""}],"source_content_type":"text/x-gerrit-commit-message","patch_set":1,"id":"3f79a3b5_e12b31e8","line":42,"in_reply_to":"3f79a3b5_6122c154","updated":"2018-08-22 17:55:23.000000000","message":"I am proposing this for horizon but generally this library holds good for any Django based project.\n\nIt\u0027s not addressing any specific bug, This library can be considered as a safe to have feature rather than waiting for a bug or breach attack to take place. At AT\u0026T we have enabled it on our production environments.\n\nMore on breach attacks here - http://breachattack.com/","commit_id":"c36f37817bed2e8e6b7a73466755a144cc5443f2"}]}
