OpenStack Security Advisory

  1. Bug #1566416
  2. Comment #26

Comment 26 for bug 1566416

Revision history for this message
John Dickinson (notmyname) wrote :

I'm not sure swift core has much to say on this. It's mostly an issue between swift3 and s3_token. (And FWIW, Tim is core in both swift3 and swift.)

But that being said, seems that not returning the token in the s3_token response seems reasonable.