{"action":"created","issue":{"url":"https://api.github.com/repos/emoncms/emoncms/issues/591","repository_url":"https://api.github.com/repos/emoncms/emoncms","labels_url":"https://api.github.com/repos/emoncms/emoncms/issues/591/labels{/name}","comments_url":"https://api.github.com/repos/emoncms/emoncms/issues/591/comments","events_url":"https://api.github.com/repos/emoncms/emoncms/issues/591/events","html_url":"https://github.com/emoncms/emoncms/issues/591","id":186307392,"number":591,"title":"mod_status leak from emoncms served as onion hidden service","user":{"login":"beaylott","id":654056,"avatar_url":"https://avatars.githubusercontent.com/u/654056?v=3","gravatar_id":"","url":"https://api.github.com/users/beaylott","html_url":"https://github.com/beaylott","followers_url":"https://api.github.com/users/beaylott/followers","following_url":"https://api.github.com/users/beaylott/following{/other_user}","gists_url":"https://api.github.com/users/beaylott/gists{/gist_id}","starred_url":"https://api.github.com/users/beaylott/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/beaylott/subscriptions","organizations_url":"https://api.github.com/users/beaylott/orgs","repos_url":"https://api.github.com/users/beaylott/repos","events_url":"https://api.github.com/users/beaylott/events{/privacy}","received_events_url":"https://api.github.com/users/beaylott/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":7,"created_at":"2016-10-31T15:06:31Z","updated_at":"2016-11-04T00:08:11Z","closed_at":null,"body":"Issue raised here:\r\n\r\nhttps://mascherari.press/dark-web-diaries-maybe-dont-put-your-house-on-the-dark-web/\r\n\r\nI dont know if this is actually an issue in current build. I am not able to reproduce trivially. Im guessing that in the above case a request to the hidden service looks like localhost access to apache. Obviously this is not normal environment. Could consider disabling mod_status."},"comment":{"url":"https://api.github.com/repos/emoncms/emoncms/issues/comments/258311121","html_url":"https://github.com/emoncms/emoncms/issues/591#issuecomment-258311121","issue_url":"https://api.github.com/repos/emoncms/emoncms/issues/591","id":258311121,"user":{"login":"chaveiro","id":4527135,"avatar_url":"https://avatars.githubusercontent.com/u/4527135?v=3","gravatar_id":"","url":"https://api.github.com/users/chaveiro","html_url":"https://github.com/chaveiro","followers_url":"https://api.github.com/users/chaveiro/followers","following_url":"https://api.github.com/users/chaveiro/following{/other_user}","gists_url":"https://api.github.com/users/chaveiro/gists{/gist_id}","starred_url":"https://api.github.com/users/chaveiro/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/chaveiro/subscriptions","organizations_url":"https://api.github.com/users/chaveiro/orgs","repos_url":"https://api.github.com/users/chaveiro/repos","events_url":"https://api.github.com/users/chaveiro/events{/privacy}","received_events_url":"https://api.github.com/users/chaveiro/received_events","type":"User","site_admin":false},"created_at":"2016-11-04T00:08:11Z","updated_at":"2016-11-04T00:08:11Z","body":"POST apikey or using Authorization: Bearer type is supported since 2015."}}
{"actor":{"display_login":"chaveiro"}}