<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
</head>
<body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; color: rgb(0, 0, 0); font-size: 14px; font-family: Calibri, sans-serif;">
<div><span style="background-color: rgb(255, 255, 255); color: rgb(51, 51, 51); line-height: 18px; widows: 1;">Until django releases an official patch for the BREACH vulnerability, I think we should take a look at django-debreach. The django-debreach package
provides some, possibly enough, protection against a BREACH attack. Its integration to Horizon is clear by following the configuration found here: </span><a href="https://pypi.python.org/pypi/django-debreach">https://pypi.python.org/pypi/django-debreach</a></div>
<p id="yui_3_10_3_1_1447972446750_267" style="margin: 0px 0px 0.8em; padding: 0px; width: auto; max-width: 45em; color: rgb(51, 51, 51); line-height: 18px; widows: 1; background-color: rgb(255, 255, 255);">
<br>
</p>
<p id="yui_3_10_3_1_1447972446750_267" style="margin: 0px 0px 0.8em; padding: 0px; width: auto; max-width: 45em; color: rgb(51, 51, 51); line-height: 18px; widows: 1; background-color: rgb(255, 255, 255);">
The proposed change to Horizon: <a href="https://review.openstack.org/#/c/247838/">https://review.openstack.org/#/c/247838/</a></p>
<p id="yui_3_10_3_1_1447972446750_267" style="margin: 0px 0px 0.8em; padding: 0px; width: auto; max-width: 45em; color: rgb(51, 51, 51); line-height: 18px; widows: 1;">
The proposed change to Requirements: <a href="https://review.openstack.org/#/c/248233/">https://review.openstack.org/#/c/248233/</a></p>
<p id="yui_3_10_3_1_1447972446750_267" style="margin: 0px 0px 0.8em; padding: 0px; width: auto; max-width: 45em; color: rgb(51, 51, 51); line-height: 18px; widows: 1;">
<br>
</p>
<p id="yui_3_10_3_1_1447972446750_267" style="margin: 0px 0px 0.8em; padding: 0px; width: auto; max-width: 45em; color: rgb(51, 51, 51); line-height: 18px; widows: 1;">
Regards,</p>
<p id="yui_3_10_3_1_1447972446750_267" style="margin: 0px 0px 0.8em; padding: 0px; width: auto; max-width: 45em; color: rgb(51, 51, 51); line-height: 18px; widows: 1;">
Rick Bartra</p>
</body>
</html>