| Index: dashboard/dashboard/services/milo_service.py
|
| diff --git a/dashboard/dashboard/services/milo_service.py b/dashboard/dashboard/services/milo_service.py
|
| index 85efff2720e68f4825a243fcd6d99221fe8d553a..a398deb7fd9b19a9b8f4d551c7297ec73d45cc4e 100644
|
| --- a/dashboard/dashboard/services/milo_service.py
|
| +++ b/dashboard/dashboard/services/milo_service.py
|
| @@ -44,7 +44,9 @@ def GetBuildbotBuildInfo(master, builder, build_num):
|
| if response.status_code != 200:
|
| return None
|
|
|
| - # Unwrap the gRPC message
|
| + # Unwrap the gRPC message.
|
| + # Start by removing the jsonp prefix
|
| + # (see http://security.stackexchange.com/questions/110539).
|
| resp = json.loads(response.content[5:]) # Remove the jsonp header.
|
| # Decompress and unmarshal the json message.
|
| data = base64.b64decode(resp['data'])
|
|
|