openstack
/
openstack
Code Issues Proposed changes

Update git submodules 

* Update oslo.messaging from branch 'master'
  to 3485301b1838353c16c6dd1c1cfbcab866df2e5d
  - Merge "Only allow safe context fields in notifications"
  - Only allow safe context fields in notifications
    
    Publishing a fully hydrated context object in a notification would give
    someone with access to that notification the ability to impersonate the
    original actor through inclusion of sensitive fields.
    
    Now, instead, we pare down the context object to the bare minimum before
    passing it for serialization in notification workflows.
    
    Related-bug: 2030976
    Change-Id: Ic94323658c89df1c1ff32f511ca23502317d0f00
This commit is contained in:
Zuul 2023-08-17 12:43:27 +00:00 committed by Gerrit Code Review
parent 7ff317b5dc
commit a64a6c440f
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
oslo.messaging

@ -1 +1 @@
Subproject commit fa1563004134e32b137605709bd7755986883025
Subproject commit 3485301b1838353c16c6dd1c1cfbcab866df2e5d