)]}'
{"security-notes/OSSN-0052":[{"author":{"_account_id":7063,"name":"Robert Clark","email":"hyakuhei@gmail.com","username":"hyakuhei"},"change_message_id":"d19652cde39b9bcf9aebb5225ed64ead8c76a4b7","unresolved":false,"context_lines":[{"line_number":1,"context_line":"The swift client exposes raw token values in debug logs"},{"line_number":2,"context_line":"---"},{"line_number":3,"context_line":""},{"line_number":4,"context_line":"### Summary ###"}],"source_content_type":"application/octet-stream","patch_set":1,"id":"da20952f_231d6866","line":1,"updated":"2015-09-02 22:53:28.000000000","message":"Drop \u0027the\u0027, capitialize Swift","commit_id":"6f21caa2b6f347e2dbec89c68017dd6f824f1dae"},{"author":{"_account_id":7063,"name":"Robert Clark","email":"hyakuhei@gmail.com","username":"hyakuhei"},"change_message_id":"d19652cde39b9bcf9aebb5225ed64ead8c76a4b7","unresolved":false,"context_lines":[{"line_number":3,"context_line":""},{"line_number":4,"context_line":"### Summary ###"},{"line_number":5,"context_line":"The password and authentication token configuration options for the"},{"line_number":6,"context_line":"swiftclient are not marked as secret. The values of these options will"},{"line_number":7,"context_line":"be logged to the standard logging output when the controller is run in"},{"line_number":8,"context_line":"debug mode."},{"line_number":9,"context_line":""}],"source_content_type":"application/octet-stream","patch_set":1,"id":"da20952f_633a80cf","line":6,"updated":"2015-09-02 22:53:28.000000000","message":"I think Swift client is a separate project and should be addressed as such.","commit_id":"6f21caa2b6f347e2dbec89c68017dd6f824f1dae"},{"author":{"_account_id":7063,"name":"Robert Clark","email":"hyakuhei@gmail.com","username":"hyakuhei"},"change_message_id":"d19652cde39b9bcf9aebb5225ed64ead8c76a4b7","unresolved":false,"context_lines":[{"line_number":25,"context_line":"not be transported off the system in plaintext such as through syslog."},{"line_number":26,"context_line":""},{"line_number":27,"context_line":"The debug level can be turned off by setting the following option in"},{"line_number":28,"context_line":"the `glance-api.conf` file: "},{"line_number":29,"context_line":"    [DEFAULT]"},{"line_number":30,"context_line":"    debug \u003d false"},{"line_number":31,"context_line":""}],"source_content_type":"application/octet-stream","patch_set":1,"id":"da20952f_e3fe9004","line":28,"updated":"2015-09-02 22:53:28.000000000","message":"bah! Hanging whitespace.","commit_id":"6f21caa2b6f347e2dbec89c68017dd6f824f1dae"},{"author":{"_account_id":7063,"name":"Robert Clark","email":"hyakuhei@gmail.com","username":"hyakuhei"},"change_message_id":"d19652cde39b9bcf9aebb5225ed64ead8c76a4b7","unresolved":false,"context_lines":[{"line_number":31,"context_line":""},{"line_number":32,"context_line":"### Contacts / References ###"},{"line_number":33,"context_line":"This OSSN : https://wiki.openstack.org/wiki/OSSN/OSSN-0052"},{"line_number":34,"context_line":"Original LaunchPad Bug : https://bugs.launchpad.net/ossn/+bug/1470740"},{"line_number":35,"context_line":"OpenStack Security ML : openstack-security@lists.openstack.org"},{"line_number":36,"context_line":"OpenStack Security Group : https://launchpad.net/~openstack-ossg"}],"source_content_type":"application/octet-stream","patch_set":1,"id":"da20952f_a3a41808","line":34,"updated":"2015-09-02 22:53:28.000000000","message":"This should link to swift bug","commit_id":"6f21caa2b6f347e2dbec89c68017dd6f824f1dae"},{"author":{"_account_id":10670,"name":"Michael McCune","email":"elmiko@redhat.com","username":"mimccune"},"change_message_id":"5cb2aa9ca1729a715970e455ca096153d73a6b8c","unresolved":false,"context_lines":[{"line_number":12,"context_line":""},{"line_number":13,"context_line":"### Discussion ###"},{"line_number":14,"context_line":"When using the python-swiftclient to connect to Glance, and the"},{"line_number":15,"context_line":":glance-api.conf: has set value of the debug option to True, the"},{"line_number":16,"context_line":"requests sent through the API, including user and token details, will be"},{"line_number":17,"context_line":"captured in the local log mechanism."},{"line_number":18,"context_line":""}],"source_content_type":"application/octet-stream","patch_set":4,"id":"da20952f_41da9d4c","line":15,"updated":"2015-09-04 00:12:02.000000000","message":"should probably be \"..has set the value of the...\"","commit_id":"3a6c215f3327e46742334af6fb733979b22cbd2e"}]}