)]}'
{"security-guide/ch_dashboard.xml":[{"author":{"_account_id":12325,"name":"Nathaniel Dillon","email":"nathaniel.dillon@alumni.depaul.edu","username":"sicarie"},"change_message_id":"4fea58cd20d2905ffca0a4f2b961bcabf53f480d","unresolved":false,"context_lines":[{"line_number":77,"context_line":"    \u003cpara\u003eMany organizations typically deploy web applications at subdomains of an overarching"},{"line_number":78,"context_line":"      organization domain. It is natural for users to expect a domain of the form"},{"line_number":79,"context_line":"        \u003curi\u003eopenstack.example.org\u003c/uri\u003e. In this context, there are often many applications which"},{"line_number":80,"context_line":"      serves the user-controlled content are also deployed in the same second-level namespace. This"},{"line_number":81,"context_line":"      name structure is convenient and simplifies name server maintenance.\u003c/para\u003e"},{"line_number":82,"context_line":"    \u003cpara\u003eWe strongly recommend deploying horizon to a \u003cemphasis\u003esecond-level domain\u003c/emphasis\u003e,"},{"line_number":83,"context_line":"      such as \u003curi\u003ehttps://example.com\u003c/uri\u003e, rather than deploying horizon on a \u003cemphasis\u003eshared"}],"source_content_type":"application/xml","patch_set":1,"id":"7ad8896b_e2510e10","line":80,"updated":"2015-05-11 17:50:57.000000000","message":"This is no longer a grammatically correct sentence. Maybe: \"In this context, there are often applications which are deployed in the same second-level namespace.\"\n\nI think we can leave out the \u0027user-controlled\u0027 as it\u0027s also addressed in the CSRF section in this chapter.","commit_id":"a4e1f90e73d7011f2865d3a0e27aafe36eb24aa4"},{"author":{"_account_id":12325,"name":"Nathaniel Dillon","email":"nathaniel.dillon@alumni.depaul.edu","username":"sicarie"},"change_message_id":"4fea58cd20d2905ffca0a4f2b961bcabf53f480d","unresolved":false,"context_lines":[{"line_number":81,"context_line":"      name structure is convenient and simplifies name server maintenance.\u003c/para\u003e"},{"line_number":82,"context_line":"    \u003cpara\u003eWe strongly recommend deploying horizon to a \u003cemphasis\u003esecond-level domain\u003c/emphasis\u003e,"},{"line_number":83,"context_line":"      such as \u003curi\u003ehttps://example.com\u003c/uri\u003e, rather than deploying horizon on a \u003cemphasis\u003eshared"},{"line_number":84,"context_line":"        subdomain\u003c/emphasis\u003e of any level, i.e, for example \u003curi\u003ehttps://openstack.example.org\u003c/uri\u003e"},{"line_number":85,"context_line":"      or \u003curi\u003ehttps://horizon.openstack.example.org\u003c/uri\u003e. We also suggest not to deploy horizon to"},{"line_number":86,"context_line":"      bare internal domains like \u003curi\u003ehttps://horizon/\u003c/uri\u003e. These recommendations are based on the"},{"line_number":87,"context_line":"      limitations of browser same-origin-policy.\u003c/para\u003e"}],"source_content_type":"application/xml","patch_set":1,"id":"7ad8896b_a2a9c6e1","line":84,"updated":"2015-05-11 17:50:57.000000000","message":"Per documentation conventions, non-English abbreviations such as i.e. should not be used, and it is redundant next to the \u0027for example\u0027.","commit_id":"a4e1f90e73d7011f2865d3a0e27aafe36eb24aa4"},{"author":{"_account_id":12325,"name":"Nathaniel Dillon","email":"nathaniel.dillon@alumni.depaul.edu","username":"sicarie"},"change_message_id":"fc57541aee5bd8eddee01b864fabe9b20e19974a","unresolved":false,"context_lines":[{"line_number":87,"context_line":"      horizon on a \u003cemphasis\u003eshared subdomain\u003c/emphasis\u003e of any level,"},{"line_number":88,"context_line":"      for example \u003curi\u003ehttps://openstack.example.org\u003c/uri\u003e or"},{"line_number":89,"context_line":"      \u003curi\u003ehttps://horizon.openstack.example.org\u003c/uri\u003e. We also"},{"line_number":90,"context_line":"      suggest not to deploy horizon to bare internal domains like"},{"line_number":91,"context_line":"      \u003curi\u003ehttps://horizon/\u003c/uri\u003e. These recommendations are based on the"},{"line_number":92,"context_line":"      limitations of browser same-origin-policy.\u003c/para\u003e"},{"line_number":93,"context_line":"    \u003cpara\u003eRecommendations given in this guide cannot effectively guard against"}],"source_content_type":"application/xml","patch_set":6,"id":"7a016987_774df698","line":90,"updated":"2015-05-22 23:14:19.000000000","message":"Per doc convention, projects are referenced by the general type (ie, horizon should be dashboard). \n\nAlso, I would prefer the above \"suggest not to\" be reverted to \"advise against\".","commit_id":"50473d4737e8a6d0369d498c14fcb9c845c827c8"}]}