)]}'
{"security-notes/OSSN-0044":[{"author":{"_account_id":7063,"name":"Robert Clark","email":"hyakuhei@gmail.com","username":"hyakuhei"},"change_message_id":"dd99a40f9eedf214f942d12801b643298306b16c","unresolved":false,"context_lines":[{"line_number":1,"context_line":"noVNC allows session theft"},{"line_number":2,"context_line":"---"},{"line_number":3,"context_line":""},{"line_number":4,"context_line":"### Summary ###"}],"source_content_type":"application/octet-stream","patch_set":2,"id":"ba7be1f8_5b072018","line":1,"updated":"2015-02-25 04:56:45.000000000","message":"Title will not hold true in the future. Perhaps consider \u0027Some versions of noVNC\u0027 or \u0027Older versions of noVNC\u0027 etc...","commit_id":"ab8147c3dc719a5fcdaf556a818c1ea4ff9778d5"},{"author":{"_account_id":7063,"name":"Robert Clark","email":"hyakuhei@gmail.com","username":"hyakuhei"},"change_message_id":"dd99a40f9eedf214f942d12801b643298306b16c","unresolved":false,"context_lines":[{"line_number":7,"context_line":"when setting cookies containing an authentication token."},{"line_number":8,"context_line":""},{"line_number":9,"context_line":"### Affected Services / Software ###"},{"line_number":10,"context_line":"noVNC prior to v0.5"},{"line_number":11,"context_line":""},{"line_number":12,"context_line":"### Discussion ###"},{"line_number":13,"context_line":"Versions of noVNC prior to October 28, 2013 do not properly set the"}],"source_content_type":"application/octet-stream","patch_set":2,"id":"ba7be1f8_9b3b58d0","line":10,"updated":"2015-02-25 04:56:45.000000000","message":"Nova should probably be added to this list as a primary consumer of noVNC. I want to ensure that deployers look out for this issue in their Compute deployments.","commit_id":"ab8147c3dc719a5fcdaf556a818c1ea4ff9778d5"}]}