)]}'
{
  "commit": "4f5cd0c0331943c7ec72df3b827d972584f77833",
  "tree": "9aba6fa0d87f10f1cf442a95a6c9e6f1200d28fb",
  "parents": [
    "66e66e71132034aa620ffbae9008f951da0f9f27"
  ],
  "author": {
    "name": "Roberto Clapis",
    "email": "roberto@golang.org",
    "time": "Wed Aug 26 08:53:03 2020 +0200"
  },
  "committer": {
    "name": "Filippo Valsorda",
    "email": "filippo@golang.org",
    "time": "Mon Sep 14 15:42:03 2020 +0000"
  },
  "message": "net/http/cgi,net/http/fcgi: add Content-Type detection\n\nThis CL ensures that responses served via CGI and FastCGI\nhave a Content-Type header based on the content of the\nresponse if not explicitly set by handlers.\n\nIf the implementers of the handler did not explicitly\nspecify a Content-Type both CGI implementations would default\nto \"text/html\", potentially causing cross-site scripting.\n\nThanks to RedTeam Pentesting GmbH for reporting this.\n\nFixes #40928\nFixes CVE-2020-24553\n\nChange-Id: I82cfc396309b5ab2e8d6e9a87eda8ea7e3799473\nReviewed-on: https://team-review.git.corp.google.com/c/golang/go-private/+/823217\nReviewed-by: Russ Cox \u003crsc@google.com\u003e\nReviewed-on: https://go-review.googlesource.com/c/go/+/252179\nRun-TryBot: Filippo Valsorda \u003cfilippo@golang.org\u003e\nTryBot-Result: Go Bot \u003cgobot@golang.org\u003e\nReviewed-by: Katie Hockman \u003ckatie@golang.org\u003e\n",
  "tree_diff": [
    {
      "type": "modify",
      "old_id": "d7d813e68a836175c34de41c2102fee87379d405",
      "old_mode": 33188,
      "old_path": "src/net/http/cgi/child.go",
      "new_id": "690986335c076156443d7b549c6992cb4ec7567c",
      "new_mode": 33188,
      "new_path": "src/net/http/cgi/child.go"
    },
    {
      "type": "modify",
      "old_id": "14e0af475f5af90903a8f4668d44a173697eacea",
      "old_mode": 33188,
      "old_path": "src/net/http/cgi/child_test.go",
      "new_id": "18cf789bd59decfd85ac7c9f9707fe2b1a209b96",
      "new_mode": 33188,
      "new_path": "src/net/http/cgi/child_test.go"
    },
    {
      "type": "modify",
      "old_id": "eaa090f6fe4f37102b142ff8744c1a4883bfc2d1",
      "old_mode": 33188,
      "old_path": "src/net/http/cgi/integration_test.go",
      "new_id": "76cbca8e6036725ac5091b0dd51ffbd2e2869677",
      "new_mode": 33188,
      "new_path": "src/net/http/cgi/integration_test.go"
    },
    {
      "type": "modify",
      "old_id": "0e91042543b59860fdd892e41da10493d3bc3286",
      "old_mode": 33188,
      "old_path": "src/net/http/fcgi/child.go",
      "new_id": "34761f32ee189aec004c688e182a984640c2be8f",
      "new_mode": 33188,
      "new_path": "src/net/http/fcgi/child.go"
    },
    {
      "type": "modify",
      "old_id": "e9d2b34023c81a392c6b1662eaff5a162f20cbfb",
      "old_mode": 33188,
      "old_path": "src/net/http/fcgi/fcgi_test.go",
      "new_id": "4a27a12c35a99e0cdb03d974161dd54deb65c0e7",
      "new_mode": 33188,
      "new_path": "src/net/http/fcgi/fcgi_test.go"
    }
  ]
}