{"action":"created","issue":{"url":"https://api.github.com/repos/gorhill/uMatrix/issues/276","repository_url":"https://api.github.com/repos/gorhill/uMatrix","labels_url":"https://api.github.com/repos/gorhill/uMatrix/issues/276/labels{/name}","comments_url":"https://api.github.com/repos/gorhill/uMatrix/issues/276/comments","events_url":"https://api.github.com/repos/gorhill/uMatrix/issues/276/events","html_url":"https://github.com/gorhill/uMatrix/issues/276","id":90610740,"number":276,"title":"Blocking Cross-site scripts (XSS)","user":{"login":"mark-owen","id":11752657,"avatar_url":"https://avatars.githubusercontent.com/u/11752657?v=3","gravatar_id":"","url":"https://api.github.com/users/mark-owen","html_url":"https://github.com/mark-owen","followers_url":"https://api.github.com/users/mark-owen/followers","following_url":"https://api.github.com/users/mark-owen/following{/other_user}","gists_url":"https://api.github.com/users/mark-owen/gists{/gist_id}","starred_url":"https://api.github.com/users/mark-owen/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/mark-owen/subscriptions","organizations_url":"https://api.github.com/users/mark-owen/orgs","repos_url":"https://api.github.com/users/mark-owen/repos","events_url":"https://api.github.com/users/mark-owen/events{/privacy}","received_events_url":"https://api.github.com/users/mark-owen/received_events","type":"User","site_admin":false},"labels":[],"state":"closed","locked":false,"assignee":null,"milestone":null,"comments":7,"created_at":"2015-06-24T08:35:46Z","updated_at":"2016-04-06T02:17:51Z","closed_at":"2015-06-24T11:28:43Z","body":"Does uMatrix block XSS like NoScript does?\r\n\r\nIf not, is it possible to add this feature, or is this even needed at all?"},"comment":{"url":"https://api.github.com/repos/gorhill/uMatrix/issues/comments/206082708","html_url":"https://github.com/gorhill/uMatrix/issues/276#issuecomment-206082708","issue_url":"https://api.github.com/repos/gorhill/uMatrix/issues/276","id":206082708,"user":{"login":"ThrawnCA","id":3080440,"avatar_url":"https://avatars.githubusercontent.com/u/3080440?v=3","gravatar_id":"","url":"https://api.github.com/users/ThrawnCA","html_url":"https://github.com/ThrawnCA","followers_url":"https://api.github.com/users/ThrawnCA/followers","following_url":"https://api.github.com/users/ThrawnCA/following{/other_user}","gists_url":"https://api.github.com/users/ThrawnCA/gists{/gist_id}","starred_url":"https://api.github.com/users/ThrawnCA/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/ThrawnCA/subscriptions","organizations_url":"https://api.github.com/users/ThrawnCA/orgs","repos_url":"https://api.github.com/users/ThrawnCA/repos","events_url":"https://api.github.com/users/ThrawnCA/events{/privacy}","received_events_url":"https://api.github.com/users/ThrawnCA/received_events","type":"User","site_admin":false},"created_at":"2016-04-06T02:17:51Z","updated_at":"2016-04-06T02:17:51Z","body":"Does that cover inline scripts? If so, it's pretty close.\r\n\r\nI believe uMatrix doesn't handle data: URIs, though? PoC at http://evil.hackademix.net/hsb/"}}