)]}'
{"swift/proxy/controllers/base.py":[{"author":{"_account_id":2622,"name":"Samuel Merritt","email":"spam+launchpad@andcheese.org","username":"torgomatic"},"change_message_id":"1927560f5bdbe81575a29e551c927955c12b086a","unresolved":false,"context_lines":[{"line_number":723,"context_line":"        if self.app.cors_allow_origin:"},{"line_number":724,"context_line":"            allowed_origins.update(self.app.cors_allow_origin)"},{"line_number":725,"context_line":"        if (req_origin_value not in allowed_origins and"},{"line_number":726,"context_line":"                \u0027*\u0027 not in allowed_origins) or ("},{"line_number":727,"context_line":"                req.headers.get(\u0027Access-Control-Request-Method\u0027) not in"},{"line_number":728,"context_line":"                self.allowed_methods):"},{"line_number":729,"context_line":"            resp.status \u003d HTTP_UNAUTHORIZED"}],"source_content_type":"text/x-python","patch_set":4,"id":"AAAALn%2F%2Fy%2BI%3D","line":726,"updated":"2012-11-06 02:12:58.000000000","message":"There\u0027s no test for having an allowed origin of *.","commit_id":"cdac3bad8aa508410375e66b16ef62b12ed07514"},{"author":{"_account_id":2622,"name":"Samuel Merritt","email":"spam+launchpad@andcheese.org","username":"torgomatic"},"change_message_id":"1846eeeac9cbd58c5b3bf1b583a4d31083f42fe9","unresolved":false,"context_lines":[{"line_number":726,"context_line":"                \u0027*\u0027 not in allowed_origins) or ("},{"line_number":727,"context_line":"                req.headers.get(\u0027Access-Control-Request-Method\u0027) not in"},{"line_number":728,"context_line":"                self.allowed_methods):"},{"line_number":729,"context_line":"            resp.status \u003d HTTP_UNAUTHORIZED"},{"line_number":730,"context_line":"            return resp  # CORS preflight request that isn\u0027t valid"},{"line_number":731,"context_line":"        headers[\u0027access-control-allow-origin\u0027] \u003d req_origin_value"},{"line_number":732,"context_line":"        if cors.get(\u0027max_age\u0027, None) is not None:"}],"source_content_type":"text/x-python","patch_set":4,"id":"AAAALn%2F%2Fy%2BU%3D","line":729,"updated":"2012-11-06 02:01:53.000000000","message":"You know, the CORS spec just says \"not 200\".\n\nThink carefully here; this is probably the only chance you\u0027ll ever have to return \"418 I\u0027m a teapot\" from a real production application and still be 100% standards-compliant.\n\n;) , mostly","commit_id":"cdac3bad8aa508410375e66b16ef62b12ed07514"}]}