{"action":"created","issue":{"url":"https://api.github.com/repos/w3c/webappsec-suborigins/issues/44","repository_url":"https://api.github.com/repos/w3c/webappsec-suborigins","labels_url":"https://api.github.com/repos/w3c/webappsec-suborigins/issues/44/labels{/name}","comments_url":"https://api.github.com/repos/w3c/webappsec-suborigins/issues/44/comments","events_url":"https://api.github.com/repos/w3c/webappsec-suborigins/issues/44/events","html_url":"https://github.com/w3c/webappsec-suborigins/issues/44","id":175814545,"number":44,"title":"What to do with WebSockets","user":{"login":"metromoxie","id":401207,"avatar_url":"https://avatars.githubusercontent.com/u/401207?v=3","gravatar_id":"","url":"https://api.github.com/users/metromoxie","html_url":"https://github.com/metromoxie","followers_url":"https://api.github.com/users/metromoxie/followers","following_url":"https://api.github.com/users/metromoxie/following{/other_user}","gists_url":"https://api.github.com/users/metromoxie/gists{/gist_id}","starred_url":"https://api.github.com/users/metromoxie/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/metromoxie/subscriptions","organizations_url":"https://api.github.com/users/metromoxie/orgs","repos_url":"https://api.github.com/users/metromoxie/repos","events_url":"https://api.github.com/users/metromoxie/events{/privacy}","received_events_url":"https://api.github.com/users/metromoxie/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/w3c/webappsec-suborigins/labels/bug","name":"bug","color":"fc2929"}],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":5,"created_at":"2016-09-08T17:32:46Z","updated_at":"2016-09-08T22:30:02Z","closed_at":null,"body":"I think we've discussed before that WebSockets should simply be disallowed. If that's the case, that should be explicitly added to the spec. If not, I assume we'll need to add Suborigin headers to requests. Either way, we need to spec out a solution."},"comment":{"url":"https://api.github.com/repos/w3c/webappsec-suborigins/issues/comments/245762101","html_url":"https://github.com/w3c/webappsec-suborigins/issues/44#issuecomment-245762101","issue_url":"https://api.github.com/repos/w3c/webappsec-suborigins/issues/44","id":245762101,"user":{"login":"devd","id":136985,"avatar_url":"https://avatars.githubusercontent.com/u/136985?v=3","gravatar_id":"","url":"https://api.github.com/users/devd","html_url":"https://github.com/devd","followers_url":"https://api.github.com/users/devd/followers","following_url":"https://api.github.com/users/devd/following{/other_user}","gists_url":"https://api.github.com/users/devd/gists{/gist_id}","starred_url":"https://api.github.com/users/devd/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/devd/subscriptions","organizations_url":"https://api.github.com/users/devd/orgs","repos_url":"https://api.github.com/users/devd/repos","events_url":"https://api.github.com/users/devd/events{/privacy}","received_events_url":"https://api.github.com/users/devd/received_events","type":"User","site_admin":false},"created_at":"2016-09-08T22:30:02Z","updated_at":"2016-09-08T22:30:02Z","body":"I think WebSockets can also be pretty easily faked using iframe based privilege separation: it sucks but I think for v1 we have to be pretty brutal about getting a MVP out and seeing how developers use it and what are the issues/problems using it. So, I am totally fine with punting it for v1."}}
{"actor":{"display_login":"devd"}}