{"action":"created","issue":{"url":"https://api.github.com/repos/meteor/meteor/issues/6735","repository_url":"https://api.github.com/repos/meteor/meteor","labels_url":"https://api.github.com/repos/meteor/meteor/issues/6735/labels{/name}","comments_url":"https://api.github.com/repos/meteor/meteor/issues/6735/comments","events_url":"https://api.github.com/repos/meteor/meteor/issues/6735/events","html_url":"https://github.com/meteor/meteor/issues/6735","id":146566565,"number":6735,"title":"[1.3] `check`'s Match.Optional now allows \"null\" (contrary to plan)","user":{"login":"abernix","id":841294,"avatar_url":"https://avatars.githubusercontent.com/u/841294?v=3","gravatar_id":"","url":"https://api.github.com/users/abernix","html_url":"https://github.com/abernix","followers_url":"https://api.github.com/users/abernix/followers","following_url":"https://api.github.com/users/abernix/following{/other_user}","gists_url":"https://api.github.com/users/abernix/gists{/gist_id}","starred_url":"https://api.github.com/users/abernix/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/abernix/subscriptions","organizations_url":"https://api.github.com/users/abernix/orgs","repos_url":"https://api.github.com/users/abernix/repos","events_url":"https://api.github.com/users/abernix/events{/privacy}","received_events_url":"https://api.github.com/users/abernix/received_events","type":"User","site_admin":false},"labels":[],"state":"closed","locked":false,"assignee":null,"milestone":null,"comments":4,"created_at":"2016-04-07T09:53:40Z","updated_at":"2016-05-03T23:09:06Z","closed_at":"2016-04-11T22:24:51Z","body":"As found during research for the problem in  #6712, `Match.Optional` now matches `null` when it had not before 1.3.  The (ultimate) decision in Issue #3876 was to keep `Match.Optional` the same (allow `undefined`) and introduce a new `Match.Maybe` which would match `null` and `undefined` in order to **NOT** do this:\r\n\r\n> silently change the (`Match.Optional`) behavior because it could introduce undiscoverable security holes into people's apps\r\n\r\nUnfortunately, the way that that #6220 was done, it literally did exactly that, and there was no Match test in place to make sure that `null` did not pass `Match.Optional`.\r\n\r\nI have an incoming PR to fix this.  This Issue is just for the record."},"comment":{"url":"https://api.github.com/repos/meteor/meteor/issues/comments/216691897","html_url":"https://github.com/meteor/meteor/issues/6735#issuecomment-216691897","issue_url":"https://api.github.com/repos/meteor/meteor/issues/6735","id":216691897,"user":{"login":"tmeasday","id":132554,"avatar_url":"https://avatars.githubusercontent.com/u/132554?v=3","gravatar_id":"","url":"https://api.github.com/users/tmeasday","html_url":"https://github.com/tmeasday","followers_url":"https://api.github.com/users/tmeasday/followers","following_url":"https://api.github.com/users/tmeasday/following{/other_user}","gists_url":"https://api.github.com/users/tmeasday/gists{/gist_id}","starred_url":"https://api.github.com/users/tmeasday/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/tmeasday/subscriptions","organizations_url":"https://api.github.com/users/tmeasday/orgs","repos_url":"https://api.github.com/users/tmeasday/repos","events_url":"https://api.github.com/users/tmeasday/events{/privacy}","received_events_url":"https://api.github.com/users/tmeasday/received_events","type":"User","site_admin":false},"created_at":"2016-05-03T23:09:06Z","updated_at":"2016-05-03T23:09:06Z","body":"@abernix let's stick with separate issues/PRs otherwise it may get confusing in categorization."}}