{"action":"created","issue":{"url":"https://api.github.com/repos/angular/angular.js/issues/15428","repository_url":"https://api.github.com/repos/angular/angular.js","labels_url":"https://api.github.com/repos/angular/angular.js/issues/15428/labels{/name}","comments_url":"https://api.github.com/repos/angular/angular.js/issues/15428/comments","events_url":"https://api.github.com/repos/angular/angular.js/issues/15428/events","html_url":"https://github.com/angular/angular.js/pull/15428","id":191410865,"number":15428,"title":"feat(security): do not bootstrap from unknown schemes with a different origin","user":{"login":"Rob--W","id":1365071,"avatar_url":"https://avatars.githubusercontent.com/u/1365071?v=3","gravatar_id":"","url":"https://api.github.com/users/Rob--W","html_url":"https://github.com/Rob--W","followers_url":"https://api.github.com/users/Rob--W/followers","following_url":"https://api.github.com/users/Rob--W/following{/other_user}","gists_url":"https://api.github.com/users/Rob--W/gists{/gist_id}","starred_url":"https://api.github.com/users/Rob--W/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/Rob--W/subscriptions","organizations_url":"https://api.github.com/users/Rob--W/orgs","repos_url":"https://api.github.com/users/Rob--W/repos","events_url":"https://api.github.com/users/Rob--W/events{/privacy}","received_events_url":"https://api.github.com/users/Rob--W/received_events","type":"User","site_admin":false},"labels":[{"id":53200617,"url":"https://api.github.com/repos/angular/angular.js/labels/cla:%20yes","name":"cla: yes","color":"bfe5bf","default":false},{"id":69001023,"url":"https://api.github.com/repos/angular/angular.js/labels/component:%20misc%20core","name":"component: misc core","color":"fef2c0","default":false},{"id":53079815,"url":"https://api.github.com/repos/angular/angular.js/labels/frequency:%20low","name":"frequency: low","color":"bfe5bf","default":false},{"id":83182120,"url":"https://api.github.com/repos/angular/angular.js/labels/severity:%20security","name":"severity: security","color":"ff1d21","default":false}],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":{"url":"https://api.github.com/repos/angular/angular.js/milestones/35","html_url":"https://github.com/angular/angular.js/milestones/Purgatory","labels_url":"https://api.github.com/repos/angular/angular.js/milestones/35/labels","id":526241,"number":35,"title":"Purgatory","description":"This milestone is for issues and PRs that weren't accepted yet and we are waiting for more info from the submitter.\r\n\r\nFor issues this typically means that we weren't able to reproduce the issue or we haven't decided yet if a feature request is a good idea at all.\r\n\r\nFor PRs this means that the PR still needs a lot of work and we might not even be interested in merging it because it looks like a non-core feature. We are still waiting for more discussion within the team or more info from the contributor before making the final decision.","creator":{"login":"IgorMinar","id":216296,"avatar_url":"https://avatars.githubusercontent.com/u/216296?v=3","gravatar_id":"","url":"https://api.github.com/users/IgorMinar","html_url":"https://github.com/IgorMinar","followers_url":"https://api.github.com/users/IgorMinar/followers","following_url":"https://api.github.com/users/IgorMinar/following{/other_user}","gists_url":"https://api.github.com/users/IgorMinar/gists{/gist_id}","starred_url":"https://api.github.com/users/IgorMinar/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/IgorMinar/subscriptions","organizations_url":"https://api.github.com/users/IgorMinar/orgs","repos_url":"https://api.github.com/users/IgorMinar/repos","events_url":"https://api.github.com/users/IgorMinar/events{/privacy}","received_events_url":"https://api.github.com/users/IgorMinar/received_events","type":"User","site_admin":false},"open_issues":36,"closed_issues":890,"state":"open","created_at":"2014-01-04T01:20:50Z","updated_at":"2016-11-28T19:23:53Z","due_on":null,"closed_at":null},"comments":10,"created_at":"2016-11-24T00:52:56Z","updated_at":"2016-11-29T00:03:33Z","closed_at":null,"pull_request":{"url":"https://api.github.com/repos/angular/angular.js/pulls/15428","html_url":"https://github.com/angular/angular.js/pull/15428","diff_url":"https://github.com/angular/angular.js/pull/15428.diff","patch_url":"https://github.com/angular/angular.js/pull/15428.patch"},"body":"Follow-up to #15427. There is no reason for allowing cross-origin automatic bootstrapping at URLs with an unknown scheme.\r\n\r\n@mprobst @petebacondarwin"},"comment":{"url":"https://api.github.com/repos/angular/angular.js/issues/comments/263434878","html_url":"https://github.com/angular/angular.js/pull/15428#issuecomment-263434878","issue_url":"https://api.github.com/repos/angular/angular.js/issues/15428","id":263434878,"user":{"login":"mgol","id":1758366,"avatar_url":"https://avatars.githubusercontent.com/u/1758366?v=3","gravatar_id":"","url":"https://api.github.com/users/mgol","html_url":"https://github.com/mgol","followers_url":"https://api.github.com/users/mgol/followers","following_url":"https://api.github.com/users/mgol/following{/other_user}","gists_url":"https://api.github.com/users/mgol/gists{/gist_id}","starred_url":"https://api.github.com/users/mgol/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/mgol/subscriptions","organizations_url":"https://api.github.com/users/mgol/orgs","repos_url":"https://api.github.com/users/mgol/repos","events_url":"https://api.github.com/users/mgol/events{/privacy}","received_events_url":"https://api.github.com/users/mgol/received_events","type":"User","site_admin":false},"created_at":"2016-11-29T00:03:33Z","updated_at":"2016-11-29T00:03:33Z","body":"@Rob--W The tests were previously failing because in the document mock you defined `location.origin` but not `location.host` and the code was using `location.host` for its comparisons. It meant the condition was never going to be true."}}
{"actor":{"display_login":"mgol"}}