{"action":"created","issue":{"url":"https://api.github.com/repos/jekkos/opensourcepos/issues/597","repository_url":"https://api.github.com/repos/jekkos/opensourcepos","labels_url":"https://api.github.com/repos/jekkos/opensourcepos/issues/597/labels{/name}","comments_url":"https://api.github.com/repos/jekkos/opensourcepos/issues/597/comments","events_url":"https://api.github.com/repos/jekkos/opensourcepos/issues/597/events","html_url":"https://github.com/jekkos/opensourcepos/issues/597","id":157147990,"number":597,"title":"Secure OSPOS against XSS, CSFR and SQL injection","user":{"login":"daN4cat","id":636048,"avatar_url":"https://avatars.githubusercontent.com/u/636048?v=3","gravatar_id":"","url":"https://api.github.com/users/daN4cat","html_url":"https://github.com/daN4cat","followers_url":"https://api.github.com/users/daN4cat/followers","following_url":"https://api.github.com/users/daN4cat/following{/other_user}","gists_url":"https://api.github.com/users/daN4cat/gists{/gist_id}","starred_url":"https://api.github.com/users/daN4cat/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/daN4cat/subscriptions","organizations_url":"https://api.github.com/users/daN4cat/orgs","repos_url":"https://api.github.com/users/daN4cat/repos","events_url":"https://api.github.com/users/daN4cat/events{/privacy}","received_events_url":"https://api.github.com/users/daN4cat/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/jekkos/opensourcepos/labels/Epic","name":"Epic","color":"3E4B9E"}],"state":"open","locked":false,"assignee":{"login":"jekkos","id":576234,"avatar_url":"https://avatars.githubusercontent.com/u/576234?v=3","gravatar_id":"","url":"https://api.github.com/users/jekkos","html_url":"https://github.com/jekkos","followers_url":"https://api.github.com/users/jekkos/followers","following_url":"https://api.github.com/users/jekkos/following{/other_user}","gists_url":"https://api.github.com/users/jekkos/gists{/gist_id}","starred_url":"https://api.github.com/users/jekkos/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/jekkos/subscriptions","organizations_url":"https://api.github.com/users/jekkos/orgs","repos_url":"https://api.github.com/users/jekkos/repos","events_url":"https://api.github.com/users/jekkos/events{/privacy}","received_events_url":"https://api.github.com/users/jekkos/received_events","type":"User","site_admin":false},"assignees":[{"login":"jekkos","id":576234,"avatar_url":"https://avatars.githubusercontent.com/u/576234?v=3","gravatar_id":"","url":"https://api.github.com/users/jekkos","html_url":"https://github.com/jekkos","followers_url":"https://api.github.com/users/jekkos/followers","following_url":"https://api.github.com/users/jekkos/following{/other_user}","gists_url":"https://api.github.com/users/jekkos/gists{/gist_id}","starred_url":"https://api.github.com/users/jekkos/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/jekkos/subscriptions","organizations_url":"https://api.github.com/users/jekkos/orgs","repos_url":"https://api.github.com/users/jekkos/repos","events_url":"https://api.github.com/users/jekkos/events{/privacy}","received_events_url":"https://api.github.com/users/jekkos/received_events","type":"User","site_admin":false},{"login":"daN4cat","id":636048,"avatar_url":"https://avatars.githubusercontent.com/u/636048?v=3","gravatar_id":"","url":"https://api.github.com/users/daN4cat","html_url":"https://github.com/daN4cat","followers_url":"https://api.github.com/users/daN4cat/followers","following_url":"https://api.github.com/users/daN4cat/following{/other_user}","gists_url":"https://api.github.com/users/daN4cat/gists{/gist_id}","starred_url":"https://api.github.com/users/daN4cat/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/daN4cat/subscriptions","organizations_url":"https://api.github.com/users/daN4cat/orgs","repos_url":"https://api.github.com/users/daN4cat/repos","events_url":"https://api.github.com/users/daN4cat/events{/privacy}","received_events_url":"https://api.github.com/users/daN4cat/received_events","type":"User","site_admin":false}],"milestone":{"url":"https://api.github.com/repos/jekkos/opensourcepos/milestones/5","html_url":"https://github.com/jekkos/opensourcepos/milestones/3.0","labels_url":"https://api.github.com/repos/jekkos/opensourcepos/milestones/5/labels","id":1630687,"number":5,"title":"3.0","description":"","creator":{"login":"daN4cat","id":636048,"avatar_url":"https://avatars.githubusercontent.com/u/636048?v=3","gravatar_id":"","url":"https://api.github.com/users/daN4cat","html_url":"https://github.com/daN4cat","followers_url":"https://api.github.com/users/daN4cat/followers","following_url":"https://api.github.com/users/daN4cat/following{/other_user}","gists_url":"https://api.github.com/users/daN4cat/gists{/gist_id}","starred_url":"https://api.github.com/users/daN4cat/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/daN4cat/subscriptions","organizations_url":"https://api.github.com/users/daN4cat/orgs","repos_url":"https://api.github.com/users/daN4cat/repos","events_url":"https://api.github.com/users/daN4cat/events{/privacy}","received_events_url":"https://api.github.com/users/daN4cat/received_events","type":"User","site_admin":false},"open_issues":9,"closed_issues":192,"state":"open","created_at":"2016-03-08T14:47:47Z","updated_at":"2016-07-10T09:45:37Z","due_on":"2016-09-03T23:00:00Z","closed_at":null},"comments":9,"created_at":"2016-05-27T07:39:49Z","updated_at":"2016-07-10T18:06:31Z","closed_at":null,"body":"Currently OSPOS is partially secured against different types of attack.\r\n\r\nThe code should be reviewed and secured against:\r\n\r\n- XSS (Cross Site Scripting) using xss_clean() on input and output (to view) data\r\n- CSFR (Cross Site Forgery) enabling csfr_protection but reviewing and updating Ajax parts\r\n- SQL injection using $this->db->escape() on database input"},"comment":{"url":"https://api.github.com/repos/jekkos/opensourcepos/issues/comments/231602399","html_url":"https://github.com/jekkos/opensourcepos/issues/597#issuecomment-231602399","issue_url":"https://api.github.com/repos/jekkos/opensourcepos/issues/597","id":231602399,"user":{"login":"daN4cat","id":636048,"avatar_url":"https://avatars.githubusercontent.com/u/636048?v=3","gravatar_id":"","url":"https://api.github.com/users/daN4cat","html_url":"https://github.com/daN4cat","followers_url":"https://api.github.com/users/daN4cat/followers","following_url":"https://api.github.com/users/daN4cat/following{/other_user}","gists_url":"https://api.github.com/users/daN4cat/gists{/gist_id}","starred_url":"https://api.github.com/users/daN4cat/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/daN4cat/subscriptions","organizations_url":"https://api.github.com/users/daN4cat/orgs","repos_url":"https://api.github.com/users/daN4cat/repos","events_url":"https://api.github.com/users/daN4cat/events{/privacy}","received_events_url":"https://api.github.com/users/daN4cat/received_events","type":"User","site_admin":false},"created_at":"2016-07-10T18:06:31Z","updated_at":"2016-07-10T18:06:31Z","body":"If no issues I would close this set of security improvements.\r\nI know we should test, but unless somebody find the time to help us we need to rely on the manual tests and code reviews done so far."}}
{"actor":{"display_login":"daN4cat"}}