{"action":"created","issue":{"url":"https://api.github.com/repos/thewizardplusplus/wizard-diary/issues/94","repository_url":"https://api.github.com/repos/thewizardplusplus/wizard-diary","labels_url":"https://api.github.com/repos/thewizardplusplus/wizard-diary/issues/94/labels{/name}","comments_url":"https://api.github.com/repos/thewizardplusplus/wizard-diary/issues/94/comments","events_url":"https://api.github.com/repos/thewizardplusplus/wizard-diary/issues/94/events","html_url":"https://github.com/thewizardplusplus/wizard-diary/issues/94","id":100700134,"number":94,"title":"Аудит безопасности","user":{"login":"thewizardplusplus","id":3732121,"avatar_url":"https://avatars.githubusercontent.com/u/3732121?v=3","gravatar_id":"","url":"https://api.github.com/users/thewizardplusplus","html_url":"https://github.com/thewizardplusplus","followers_url":"https://api.github.com/users/thewizardplusplus/followers","following_url":"https://api.github.com/users/thewizardplusplus/following{/other_user}","gists_url":"https://api.github.com/users/thewizardplusplus/gists{/gist_id}","starred_url":"https://api.github.com/users/thewizardplusplus/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/thewizardplusplus/subscriptions","organizations_url":"https://api.github.com/users/thewizardplusplus/orgs","repos_url":"https://api.github.com/users/thewizardplusplus/repos","events_url":"https://api.github.com/users/thewizardplusplus/events{/privacy}","received_events_url":"https://api.github.com/users/thewizardplusplus/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/thewizardplusplus/wizard-diary/labels/security","name":"security","color":"bfe5bf"}],"state":"open","locked":false,"assignee":{"login":"thewizardplusplus","id":3732121,"avatar_url":"https://avatars.githubusercontent.com/u/3732121?v=3","gravatar_id":"","url":"https://api.github.com/users/thewizardplusplus","html_url":"https://github.com/thewizardplusplus","followers_url":"https://api.github.com/users/thewizardplusplus/followers","following_url":"https://api.github.com/users/thewizardplusplus/following{/other_user}","gists_url":"https://api.github.com/users/thewizardplusplus/gists{/gist_id}","starred_url":"https://api.github.com/users/thewizardplusplus/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/thewizardplusplus/subscriptions","organizations_url":"https://api.github.com/users/thewizardplusplus/orgs","repos_url":"https://api.github.com/users/thewizardplusplus/repos","events_url":"https://api.github.com/users/thewizardplusplus/events{/privacy}","received_events_url":"https://api.github.com/users/thewizardplusplus/received_events","type":"User","site_admin":false},"milestone":{"url":"https://api.github.com/repos/thewizardplusplus/wizard-diary/milestones/12","html_url":"https://github.com/thewizardplusplus/wizard-diary/milestones/v7.0","labels_url":"https://api.github.com/repos/thewizardplusplus/wizard-diary/milestones/12/labels","id":1405180,"number":12,"title":"v7.0","description":"","creator":{"login":"thewizardplusplus","id":3732121,"avatar_url":"https://avatars.githubusercontent.com/u/3732121?v=3","gravatar_id":"","url":"https://api.github.com/users/thewizardplusplus","html_url":"https://github.com/thewizardplusplus","followers_url":"https://api.github.com/users/thewizardplusplus/followers","following_url":"https://api.github.com/users/thewizardplusplus/following{/other_user}","gists_url":"https://api.github.com/users/thewizardplusplus/gists{/gist_id}","starred_url":"https://api.github.com/users/thewizardplusplus/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/thewizardplusplus/subscriptions","organizations_url":"https://api.github.com/users/thewizardplusplus/orgs","repos_url":"https://api.github.com/users/thewizardplusplus/repos","events_url":"https://api.github.com/users/thewizardplusplus/events{/privacy}","received_events_url":"https://api.github.com/users/thewizardplusplus/received_events","type":"User","site_admin":false},"open_issues":1,"closed_issues":79,"state":"open","created_at":"2015-11-10T18:54:03Z","updated_at":"2016-03-07T16:24:57Z","due_on":null,"closed_at":null},"comments":0,"created_at":"2015-08-13T06:34:16Z","updated_at":"2016-03-21T13:00:34Z","closed_at":null,"body":"Проверить:\r\n\r\n- [x] права доступа к действиям:\r\n    - [x] `AccessController`;\r\n    - [x] `BackupController`;\r\n    - [x] `DailyPointController`;\r\n    - [x] `DayController`;\r\n    - [x] `MistakeController`;\r\n    - [x] `ParametersController`;\r\n    - [x] `PointController`;\r\n    - [x] `SiteController`;\r\n    - [x] `SpellingController`;\r\n    - [x] `StatsController`;\r\n- [ ] экранирование входных данных:\r\n    - [x] параметры действий:\r\n        - [x] `AccessController`:\r\n            - [x] `actionDecodeIp()`;\r\n            - [x] `actionDecodeUserAgent()`;\r\n        - [x] `BackupController`:\r\n            - [x] `actionDiff()`;\r\n            - [x] `actionCurrentDiff()`;\r\n        - [x] `DayController`:\r\n            - [x] `actionView()`;\r\n            - [x] `actionStats()`;\r\n            - [x] `actionUpdate()`;\r\n        - [x] `PointController`:\r\n            - [x] `actionFind()`;\r\n            - [x] `actionUpdate()`;\r\n    - [ ] GET-параметры:\r\n        - [ ] `BackupController`:\r\n            - [ ] `actionRedirect()`;\r\n        - [ ] `StatsController`:\r\n            - [ ] `actionAchievements()`;\r\n    - [ ] POST-параметры:\r\n        - [ ] `BackupController`:\r\n            - [ ] `actionSave()`;\r\n        - [ ] `DailyPointController`:\r\n            - [ ] `actionList()`;\r\n            - [ ] `actionUpdate()`;\r\n        - [ ] `DayController`:\r\n            - [ ] `actionUpdate()`;\r\n        - [ ] `MistakeController`:\r\n            - [ ] `actionCheck()`;\r\n        - [ ] `ParametersController`:\r\n            - [ ] `actionUpdate()`;\r\n        - [ ] `PointController`:\r\n            - [ ] `actionUpdate()`;\r\n            - [ ] `actionDelete()`;\r\n- [ ] авторизацию;\r\n- [ ] доступ к Dropbox."},"comment":{"url":"https://api.github.com/repos/thewizardplusplus/wizard-diary/issues/comments/199260481","html_url":"https://github.com/thewizardplusplus/wizard-diary/issues/94#issuecomment-199260481","issue_url":"https://api.github.com/repos/thewizardplusplus/wizard-diary/issues/94","id":199260481,"user":{"login":"thewizardplusplus","id":3732121,"avatar_url":"https://avatars.githubusercontent.com/u/3732121?v=3","gravatar_id":"","url":"https://api.github.com/users/thewizardplusplus","html_url":"https://github.com/thewizardplusplus","followers_url":"https://api.github.com/users/thewizardplusplus/followers","following_url":"https://api.github.com/users/thewizardplusplus/following{/other_user}","gists_url":"https://api.github.com/users/thewizardplusplus/gists{/gist_id}","starred_url":"https://api.github.com/users/thewizardplusplus/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/thewizardplusplus/subscriptions","organizations_url":"https://api.github.com/users/thewizardplusplus/orgs","repos_url":"https://api.github.com/users/thewizardplusplus/repos","events_url":"https://api.github.com/users/thewizardplusplus/events{/privacy}","received_events_url":"https://api.github.com/users/thewizardplusplus/received_events","type":"User","site_admin":false},"created_at":"2016-03-21T13:00:34Z","updated_at":"2016-03-21T13:00:34Z","body":"CJavaScript::encode() -> CJavaScript::quote()"}}