nova/nova/console
Sean Mooney 9588cdbfd4 address open redirect with 3 forward slashes
Ie36401c782f023d1d5f2623732619105dc2cfa24 was intended
to address OSSA-2021-002 (CVE-2021-3654) however after its
release it was discovered that the fix only worked
for urls with 2 leading slashes or more then 4.

This change adresses the missing edgecase for 3 leading slashes
and also maintian support for rejecting 2+.

Conflicts:
  nova/tests/unit/console/test_websocketproxy.py

NOTE: conflict is due to I58b0382c86d4ef798572edb63d311e0e3e6937bb
is missing in Victoria and Ie36401c782f023d1d5f2623732619105dc2cfa24
backport contained conflicts and methods order was swapped.

Change-Id: I95f68be76330ff09e5eabb5ef8dd9a18f5547866
co-authored-by: Matteo Pozza
Closes-Bug: #1927677
(cherry picked from commit 6fbd0b758d)
(cherry picked from commit 47dad4836a)
2021-09-08 21:00:08 +02:00
..
rfb Remove six.add_metaclass 2020-08-15 07:45:39 +00:00
securityproxy Remove six.add_metaclass 2020-08-15 07:45:39 +00:00
__init__.py Remove 'nova-xvpvncproxy' 2019-12-23 14:20:28 +00:00
serial.py Remove translation of log messages 2017-07-18 09:03:39 +00:00
type.py Add MKS console support 2015-07-25 15:01:44 +03:00
websocketproxy.py address open redirect with 3 forward slashes 2021-09-08 21:00:08 +02:00