)]}'
{"/PATCHSET_LEVEL":[{"author":{"_account_id":5314,"name":"Brian Rosmaita","email":"rosmaita.fossdev@gmail.com","username":"brian-rosmaita"},"change_message_id":"985d3ce60ed67e66c43dc598a5d2343371e8ecb9","unresolved":false,"context_lines":[],"source_content_type":"","patch_set":2,"id":"2237ade6_9a4e6838","updated":"2026-07-09 17:37:26.000000000","message":"LGTM.","commit_id":"18cf1e0f8d55f0b4157b1317f4c8203988707ffe"},{"author":{"_account_id":4690,"name":"melanie witt","display_name":"melwitt","email":"melwittt@gmail.com","username":"melwitt"},"change_message_id":"55d7ced8df07b07a5cea3afc5f24ec41a8ec5e80","unresolved":false,"context_lines":[],"source_content_type":"","patch_set":2,"id":"c362f292_feb17a08","updated":"2026-07-09 17:10:51.000000000","message":"This looks OK to me","commit_id":"18cf1e0f8d55f0b4157b1317f4c8203988707ffe"}],"security-notes/OSSN-0101":[{"author":{"_account_id":4690,"name":"melanie witt","display_name":"melwitt","email":"melwittt@gmail.com","username":"melwitt"},"change_message_id":"55d7ced8df07b07a5cea3afc5f24ec41a8ec5e80","unresolved":true,"context_lines":[{"line_number":5,"context_line":"The Nova console WebSocket proxy mutates a shared, process-global"},{"line_number":6,"context_line":"oslo.config allowed_origins list on every incoming request by"},{"line_number":7,"context_line":"appending the client-controlled Host header value. Because oslo.config"},{"line_number":8,"context_line":"returns a cached list object, these appends persist for the lifetime"},{"line_number":9,"context_line":"of the proxy process. This permanently weakens the cross-origin"},{"line_number":10,"context_line":"protection on the console proxy and causes unbounded memory growth."},{"line_number":11,"context_line":""}],"source_content_type":"application/octet-stream","patch_set":2,"id":"b4c51a65_60cd834c","line":8,"range":{"start_line":8,"start_character":22,"end_line":8,"end_character":28},"updated":"2026-07-09 17:10:51.000000000","message":"objects?","commit_id":"18cf1e0f8d55f0b4157b1317f4c8203988707ffe"},{"author":{"_account_id":16643,"name":"Goutham Pacha Ravi","email":"gouthampravi@gmail.com","username":"gouthamr"},"change_message_id":"aa9b337eead17a0276dc1b3682dd66986b415be6","unresolved":true,"context_lines":[{"line_number":5,"context_line":"The Nova console WebSocket proxy mutates a shared, process-global"},{"line_number":6,"context_line":"oslo.config allowed_origins list on every incoming request by"},{"line_number":7,"context_line":"appending the client-controlled Host header value. Because oslo.config"},{"line_number":8,"context_line":"returns a cached list object, these appends persist for the lifetime"},{"line_number":9,"context_line":"of the proxy process. This permanently weakens the cross-origin"},{"line_number":10,"context_line":"protection on the console proxy and causes unbounded memory growth."},{"line_number":11,"context_line":""}],"source_content_type":"application/octet-stream","patch_set":2,"id":"7097f738_47fbc07f","line":8,"range":{"start_line":8,"start_character":22,"end_line":8,"end_character":28},"in_reply_to":"b4c51a65_60cd834c","updated":"2026-07-09 18:38:08.000000000","message":"singular seems fine to me.. it is a single shared/global object..","commit_id":"18cf1e0f8d55f0b4157b1317f4c8203988707ffe"},{"author":{"_account_id":16643,"name":"Goutham Pacha Ravi","email":"gouthampravi@gmail.com","username":"gouthamr"},"change_message_id":"aa9b337eead17a0276dc1b3682dd66986b415be6","unresolved":true,"context_lines":[{"line_number":10,"context_line":"protection on the console proxy and causes unbounded memory growth."},{"line_number":11,"context_line":""},{"line_number":12,"context_line":"### Affected Services / Software ###"},{"line_number":13,"context_line":"- nova: \u003e\u003d12.0.0"},{"line_number":14,"context_line":""},{"line_number":15,"context_line":"### Discussion ###"},{"line_number":16,"context_line":"On each request, the proxy appends the Host header to"}],"source_content_type":"application/octet-stream","patch_set":2,"id":"b0e957be_383a35b8","line":13,"range":{"start_line":13,"start_character":0,"end_line":13,"end_character":16},"updated":"2026-07-09 18:38:08.000000000","message":"I missed fungi/rosmaita/Jay\u0027s lessons regarding writing this string out properly.. sorry, edit incoming","commit_id":"18cf1e0f8d55f0b4157b1317f4c8203988707ffe"}]}