nova/nova/console
Dave McCowan 0ff6742170 Websocket Proxy should verify Origin header
If the Origin HTTP header passed in the WebSocket handshake does
not match the host, this could indicate an attempt at a
cross-site attack.  This commit adds a check to verify
the origin matches the host.

Change-Id: Ica6ec23d6f69a236657d5ba0c3f51b693c633649
Closes-Bug: 1409142
2015-03-12 00:08:19 -04:00
..
__init__.py Remove vi modelines 2014-02-03 14:19:44 +00:00
api.py Remove vi modelines 2014-02-03 14:19:44 +00:00
fake.py Remove vi modelines 2014-02-03 14:19:44 +00:00
manager.py Remove vi modelines 2014-02-03 14:19:44 +00:00
rpcapi.py Remove vi modelines 2014-02-03 14:19:44 +00:00
vmrc.py Remove vi modelines 2014-02-03 14:19:44 +00:00
vmrc_manager.py Remove vi modelines 2014-02-03 14:19:44 +00:00
websocketproxy.py Websocket Proxy should verify Origin header 2015-03-12 00:08:19 -04:00
xvp.conf.template Port Cheetah templates to Jinja2 2013-09-02 16:03:34 +02:00
xvp.py Remove vi modelines 2014-02-03 14:19:44 +00:00