)]}'
{
  "commit": "efb64f89bbb14352d9a28f4cda43907ffeddf0f9",
  "tree": "90806d4643b0a7e570ed2b67b497b766b10034c0",
  "parents": [
    "26ee40b94acd89d62da6eaff51a4a73d8e409dd1"
  ],
  "author": {
    "name": "Maxim Dounin",
    "email": "mdounin@mdounin.ru",
    "time": "Fri Sep 11 17:03:56 2015 +0300"
  },
  "committer": {
    "name": "Maxim Dounin",
    "email": "mdounin@mdounin.ru",
    "time": "Fri Sep 11 17:03:56 2015 +0300"
  },
  "message": "Cache: check the whole cache key in addition to hashes.\n\nThis prevents a potential attack that discloses cached data if an attacker\nwill be able to craft a hash collision between some cache key the attacker\nis allowed to access and another cache key with protected data.\n\nSee http://mailman.nginx.org/pipermail/nginx-devel/2015-September/007288.html.\n\nThanks to Gena Makhomed and Sergey Brester.\n",
  "tree_diff": [
    {
      "type": "modify",
      "old_id": "fc147613395bffa378a3c52b603a71baf17a7e39",
      "old_mode": 33188,
      "old_path": "src/http/ngx_http_file_cache.c",
      "new_id": "66339182f625d69f9a60391bdac402a04d17f94f",
      "new_mode": 33188,
      "new_path": "src/http/ngx_http_file_cache.c"
    }
  ]
}
