)]}'
{
  "commit": "34d50084e091513ce2f2a72cfd560eff99207ec5",
  "tree": "59a7b678f5cb7d4813667f7f97f2202ebe397185",
  "parents": [
    "b07bdd9003b7a549fda5c913773d93861a4f545e"
  ],
  "author": {
    "name": "Kamil Musin",
    "email": "kamilm@google.com",
    "time": "Fri Dec 09 15:48:47 2022 +0100"
  },
  "committer": {
    "name": "Kamil Musin",
    "email": "kamilm@google.com",
    "time": "Mon Dec 12 11:16:13 2022 +0100"
  },
  "message": "Provide csp_nonce to Soy Templates\n\nThe CSP nonce is only provided if available. If a filter is installed\nthat attaches \"nonce\" attribute to request. For example in google\ndeployment of gerrit we have such filter that sets nonce on all requests\nbefore they are processed by a servelet.\n\nCSP helps protects sites from XSS attacks. On Google hosts we set CSP\nheaders that require all script elements to be accompanied by nonce (per\nrequest generated random string). Soy templates have a built in support\nfor attaching nonce, as long as the value is provided using Inject Data\nmechanism.\n\nGoogle-Bud-Id: b/33429040\nRelease-Notes: skip\nChange-Id: Ifa3a07b8c77918a8a4ab48775b68e4f3b39bd3cb\n",
  "tree_diff": [
    {
      "type": "modify",
      "old_id": "91c66bbbd316dcee44e153c92341efb6de77ff51",
      "old_mode": 33188,
      "old_path": "java/com/google/gitiles/BaseServlet.java",
      "new_id": "860ffd8c82e432f9da0d591550fea0dd0e7dc777",
      "new_mode": 33188,
      "new_path": "java/com/google/gitiles/BaseServlet.java"
    },
    {
      "type": "modify",
      "old_id": "65aea7e3094282be22d64f0f7fbceb95b9a1b907",
      "old_mode": 33188,
      "old_path": "java/com/google/gitiles/Renderer.java",
      "new_id": "3b85e3d04ef57c128518e3f7f70bad32cb782bf0",
      "new_mode": 33188,
      "new_path": "java/com/google/gitiles/Renderer.java"
    }
  ]
}