{"action":"created","issue":{"url":"https://api.github.com/repos/konklone/oversight.garden/issues/146","repository_url":"https://api.github.com/repos/konklone/oversight.garden","labels_url":"https://api.github.com/repos/konklone/oversight.garden/issues/146/labels{/name}","comments_url":"https://api.github.com/repos/konklone/oversight.garden/issues/146/comments","events_url":"https://api.github.com/repos/konklone/oversight.garden/issues/146/events","html_url":"https://github.com/konklone/oversight.garden/pull/146","id":173350629,"number":146,"title":"Web security improvements","user":{"login":"divergentdave","id":181772,"avatar_url":"https://avatars.githubusercontent.com/u/181772?v=3","gravatar_id":"","url":"https://api.github.com/users/divergentdave","html_url":"https://github.com/divergentdave","followers_url":"https://api.github.com/users/divergentdave/followers","following_url":"https://api.github.com/users/divergentdave/following{/other_user}","gists_url":"https://api.github.com/users/divergentdave/gists{/gist_id}","starred_url":"https://api.github.com/users/divergentdave/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/divergentdave/subscriptions","organizations_url":"https://api.github.com/users/divergentdave/orgs","repos_url":"https://api.github.com/users/divergentdave/repos","events_url":"https://api.github.com/users/divergentdave/events{/privacy}","received_events_url":"https://api.github.com/users/divergentdave/received_events","type":"User","site_admin":false},"labels":[],"state":"closed","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":4,"created_at":"2016-08-26T01:48:02Z","updated_at":"2016-08-28T00:58:26Z","closed_at":"2016-08-28T00:57:57Z","pull_request":{"url":"https://api.github.com/repos/konklone/oversight.garden/pulls/146","html_url":"https://github.com/konklone/oversight.garden/pull/146","diff_url":"https://github.com/konklone/oversight.garden/pull/146.diff","patch_url":"https://github.com/konklone/oversight.garden/pull/146.patch"},"body":"Motivated by Mozilla's HTTP observatory, here are some security improvements for the site. This boosts the grade from [a C-](https://observatory.mozilla.org/analyze.html?host=oversight.garden) to [an A+](https://observatory.mozilla.org/analyze.html?host=staging.oversight.garden) so far.\r\n\r\nThis still needs a little more testing, and I have a phantom CSP error to track down. In Firefox, but not Chromium, I get the following message.\r\n\r\n```\r\nContent Security Policy: The page's settings blocked the loading of a resource at self (\"default-src https://staging.oversight.garden https://www.google-analytics.com\").\r\n```\r\n\r\nThe Chosen library seems to be generating CSP errors too; I'll see if those are fixed upstream."},"comment":{"url":"https://api.github.com/repos/konklone/oversight.garden/issues/comments/242949479","html_url":"https://github.com/konklone/oversight.garden/pull/146#issuecomment-242949479","issue_url":"https://api.github.com/repos/konklone/oversight.garden/issues/146","id":242949479,"user":{"login":"konklone","id":4592,"avatar_url":"https://avatars.githubusercontent.com/u/4592?v=3","gravatar_id":"","url":"https://api.github.com/users/konklone","html_url":"https://github.com/konklone","followers_url":"https://api.github.com/users/konklone/followers","following_url":"https://api.github.com/users/konklone/following{/other_user}","gists_url":"https://api.github.com/users/konklone/gists{/gist_id}","starred_url":"https://api.github.com/users/konklone/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/konklone/subscriptions","organizations_url":"https://api.github.com/users/konklone/orgs","repos_url":"https://api.github.com/users/konklone/repos","events_url":"https://api.github.com/users/konklone/events{/privacy}","received_events_url":"https://api.github.com/users/konklone/received_events","type":"User","site_admin":false},"created_at":"2016-08-28T00:58:26Z","updated_at":"2016-08-28T00:58:26Z","body":"Also cc-ing @marumari for her enjoyment."}}
{"actor":{"display_login":"konklone"}}