OpenStack Compute (nova)

  1. Bug #1409142
  2. Comment #60

Comment 60 for bug 1409142

Revision history for this message
Dave McCowan (dave-mccowan) wrote : Re: Websocket Hijacking Vulnerability in Nova VNC Server (CVE-2015-0259)

This patch adds unit test and error checking and is off kilo/master.
@andrew, please let me know what you want to do with the RPC version.
I made the code in websocketproxy backwards compatible (silently skipping the check if access_url is not supplied).
I have icehouse and juno patches in progress.