Jay Faulkner 1b315615e7 Only allow safe context fields in notifications
Publishing a fully hydrated context object in a notification would give
someone with access to that notification the ability to impersonate the
original actor through inclusion of sensitive fields.

Now, instead, we pare down the context object to the bare minimum before
passing it for serialization in notification workflows.

Related-bug: 2030976
Change-Id: Ic94323658c89df1c1ff32f511ca23502317d0f00
2023-08-11 13:07:54 -07:00
2015-09-24 18:11:22 +08:00
2023-01-18 17:00:10 +00:00
2019-04-19 19:31:51 +00:00
2018-07-04 08:33:49 +07:00
2022-03-04 17:18:29 +00:00
2014-06-05 22:48:44 +02:00
2021-06-08 22:22:37 +08:00
2020-02-10 18:33:15 +01:00
2023-01-18 17:00:10 +00:00

Team and repository tags

image

Oslo Messaging Library

Latest Version

Downloads

The Oslo messaging API supports RPC and notifications over a number of different messaging transports.

Description
OpenStack library for messaging
Readme 36 MiB
Languages
Python 99.8%
Shell 0.2%