From 3817563ddc2417fc1efd8abde3fe315ea36b8941 Mon Sep 17 00:00:00 2001 From: "Mark J. Washenberger" Date: Tue, 5 Mar 2013 09:21:18 -0800 Subject: [PATCH] Don't show location in cached image headers bug 1135541 Change-Id: I1113182c6dd43267626c56c12ff5b018eddb7758 --- glance/api/middleware/cache.py | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/glance/api/middleware/cache.py b/glance/api/middleware/cache.py index 1789612..8f47edb 100644 --- a/glance/api/middleware/cache.py +++ b/glance/api/middleware/cache.py @@ -131,6 +131,10 @@ class CacheFilter(wsgi.Middleware): def _process_v1_request(self, request, image_id, image_iterator): image_meta = registry.get_image_metadata(request.context, image_id) + # NOTE: Don't show location! + if 'location' in image_meta: + del image_meta['location'] + # NOTE: admins can see image metadata in the v1 API, but shouldn't # be able to download the actual image data. if image_meta['deleted']: -- 1.8.0