{"push_id":998623467,"size":2,"distinct_size":2,"ref":"refs/heads/master","head":"abbb16d7abd7150a9226252f2544326930ea2baf","before":"7cea7c698d39adb9757ee59beed59f114c88f132","commits":[{"sha":"ca5c2abecfd12ad22b75c69e0debde7b625c2735","author":{"email":"8a32d27d9714af2471a1e7de2e0fcfa9b41f7c72@twistlock.com","name":"Liron Levin"},"message":"Fix #20508 - Authz plugin enabled with large text/JSON POST payload corrupts body\n\nBased on the discussion, we have changed the following:\n\n1. Send body only if content-type is application/json (based on the\nDocker official daemon REST specification, this is the provided for all\nAPIs that requires authorization.\n\n2. Correctly verify that the msg body is smaller than max cap (this was\nthe actual bug). Fix includes UT.\n\n3. Minor: Check content length > 0 (it was -1 for load, altough an\nattacker can still modify this)\n\nSigned-off-by: Liron Levin <liron@twistlock.com>","distinct":true,"url":"https://api.github.com/repos/docker/docker/commits/ca5c2abecfd12ad22b75c69e0debde7b625c2735"},{"sha":"abbb16d7abd7150a9226252f2544326930ea2baf","author":{"email":"dc73d0991b982a8303e713ef531a313af77e242a@gmail.com","name":"Brian Goff"},"message":"Merge pull request #20602 from twistlock/20508_authz_plugin_corrupt_body\n\nFix #20508 - Authz plugin enabled with large text/JSON POST payload corrupts body","distinct":true,"url":"https://api.github.com/repos/docker/docker/commits/abbb16d7abd7150a9226252f2544326930ea2baf"}]}