)]}'
{
  "commit": "4f319df8ff5a4b9f2bc62cb17df972e40b57fc81",
  "tree": "68dd975c1f1cbb4cb3d99bb68a243621a3a81636",
  "parents": [
    "74f9b7f43225ac6e4bd88d4e344158cff2417a6d"
  ],
  "author": {
    "name": "Remi NGUYEN VAN",
    "email": "reminv@google.com",
    "time": "Mon Feb 28 18:02:27 2022 +0900"
  },
  "committer": {
    "name": "Remi NGUYEN VAN",
    "email": "reminv@google.com",
    "time": "Thu Apr 07 01:18:19 2022 +0000"
  },
  "message": "Disallow PAP authentication when MPPE is requested\n\nMPPE cannot work if PAP is used as authentication, so it is not useful\nto allow PAP authentication when MPPE is enforced: establishing the\ntunnel would fail anyway with \"MPPE required, but MS-CHAP[v2] auth not\nperformed\".\nAlso users enforcing MPPE may assume that this means PAP will not be\nused for authentication, so without this change MPPE enforcement gives a\nfalse sense of security, as PAP uses plain-text credentials.\n\nBug: 201660636\nTest: atest VpnTest\nMerged-In: Ie318d45fe44294e97cf38da7f1834cf014cb4417\nChange-Id: Ie318d45fe44294e97cf38da7f1834cf014cb4417\n(cherry picked from commit 997a4a39268b4f3af7ccc388269b5eb1972d3624)\n",
  "tree_diff": [
    {
      "type": "modify",
      "old_id": "af4df1a0f8d16b47becde4cd71ebd37524fe90f0",
      "old_mode": 33188,
      "old_path": "services/core/java/com/android/server/connectivity/Vpn.java",
      "new_id": "ea1924f2d8447f98ab417ef0863a3fc743848517",
      "new_mode": 33188,
      "new_path": "services/core/java/com/android/server/connectivity/Vpn.java"
    }
  ]
}