{"action":"created","issue":{"url":"https://api.github.com/repos/Real-Gecko/filemin/issues/98","repository_url":"https://api.github.com/repos/Real-Gecko/filemin","labels_url":"https://api.github.com/repos/Real-Gecko/filemin/issues/98/labels{/name}","comments_url":"https://api.github.com/repos/Real-Gecko/filemin/issues/98/comments","events_url":"https://api.github.com/repos/Real-Gecko/filemin/issues/98/events","html_url":"https://github.com/Real-Gecko/filemin/issues/98","id":141176031,"number":98,"title":"Filenames not properly escaped in delete dialog","user":{"login":"jcameron","id":102706,"avatar_url":"https://avatars.githubusercontent.com/u/102706?v=3","gravatar_id":"","url":"https://api.github.com/users/jcameron","html_url":"https://github.com/jcameron","followers_url":"https://api.github.com/users/jcameron/followers","following_url":"https://api.github.com/users/jcameron/following{/other_user}","gists_url":"https://api.github.com/users/jcameron/gists{/gist_id}","starred_url":"https://api.github.com/users/jcameron/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/jcameron/subscriptions","organizations_url":"https://api.github.com/users/jcameron/orgs","repos_url":"https://api.github.com/users/jcameron/repos","events_url":"https://api.github.com/users/jcameron/events{/privacy}","received_events_url":"https://api.github.com/users/jcameron/received_events","type":"User","site_admin":false},"labels":[],"state":"closed","locked":false,"assignee":null,"milestone":null,"comments":2,"created_at":"2016-03-16T05:22:50Z","updated_at":"2016-03-25T07:52:54Z","closed_at":"2016-03-25T07:52:54Z","body":"See https://sourceforge.net/p/webadmin/bugs/4719/ for the details. But basically, a file named like :\r\n\r\n`tricky_<p onmouseover=alert(1)>.txt`\r\n\r\nwill generate an alert when moused over in the deletion popup.\r\n"},"comment":{"url":"https://api.github.com/repos/Real-Gecko/filemin/issues/comments/201189459","html_url":"https://github.com/Real-Gecko/filemin/issues/98#issuecomment-201189459","issue_url":"https://api.github.com/repos/Real-Gecko/filemin/issues/98","id":201189459,"user":{"login":"Real-Gecko","id":2231969,"avatar_url":"https://avatars.githubusercontent.com/u/2231969?v=3","gravatar_id":"","url":"https://api.github.com/users/Real-Gecko","html_url":"https://github.com/Real-Gecko","followers_url":"https://api.github.com/users/Real-Gecko/followers","following_url":"https://api.github.com/users/Real-Gecko/following{/other_user}","gists_url":"https://api.github.com/users/Real-Gecko/gists{/gist_id}","starred_url":"https://api.github.com/users/Real-Gecko/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/Real-Gecko/subscriptions","organizations_url":"https://api.github.com/users/Real-Gecko/orgs","repos_url":"https://api.github.com/users/Real-Gecko/repos","events_url":"https://api.github.com/users/Real-Gecko/events{/privacy}","received_events_url":"https://api.github.com/users/Real-Gecko/received_events","type":"User","site_admin":false},"created_at":"2016-03-25T07:52:54Z","updated_at":"2016-03-25T07:52:54Z","body":"Fixed in version 1.1.1."}}