)]}'
{"swift/common/middleware/s3api/s3request.py":[{"author":{"_account_id":15343,"name":"Tim Burke","email":"tburke@nvidia.com","username":"tburke"},"change_message_id":"64405169f3c54c43b5fdb741531e9b6eff48949a","unresolved":false,"context_lines":[{"line_number":483,"context_line":"        elif self._is_header_auth:"},{"line_number":484,"context_line":"            cred_str \u003d self.headers[\u0027Authorization\u0027]"},{"line_number":485,"context_line":""},{"line_number":486,"context_line":"        if self.location.lower() in cred_str:"},{"line_number":487,"context_line":"            self.location \u003d self.location.lower()"},{"line_number":488,"context_line":""},{"line_number":489,"context_line":"        return b\u0027\\n\u0027.join(["}],"source_content_type":"text/x-python","patch_set":5,"id":"9f560f44_261808d2","line":486,"updated":"2020-07-24 20:21:58.000000000","message":"This seems a little loose -- what if someone\u0027s access ID happens to contain the lower-cased region name, but the request was actually signed with the upper-cased one?\n\nWe already need to make a tighter comparison up above; what do you think about something like http://paste.openstack.org/show/796299/ (applied on top of this)?","commit_id":"1c483c0387940538cd59d393e89055304e62817a"},{"author":{"_account_id":15343,"name":"Tim Burke","email":"tburke@nvidia.com","username":"tburke"},"change_message_id":"64405169f3c54c43b5fdb741531e9b6eff48949a","unresolved":false,"context_lines":[{"line_number":484,"context_line":"            cred_str \u003d self.headers[\u0027Authorization\u0027]"},{"line_number":485,"context_line":""},{"line_number":486,"context_line":"        if self.location.lower() in cred_str:"},{"line_number":487,"context_line":"            self.location \u003d self.location.lower()"},{"line_number":488,"context_line":""},{"line_number":489,"context_line":"        return b\u0027\\n\u0027.join(["},{"line_number":490,"context_line":"            b\u0027AWS4-HMAC-SHA256\u0027,"}],"source_content_type":"text/x-python","patch_set":5,"id":"9f560f44_0007ac1e","line":487,"updated":"2020-07-24 20:21:58.000000000","message":"OK, yeah -- self.location comes from the config, but it\u0027ll only impact this one request.","commit_id":"1c483c0387940538cd59d393e89055304e62817a"}]}