{"action":"created","issue":{"url":"https://api.github.com/repos/jacurtis/laravel-blog-tutorial/issues/1","repository_url":"https://api.github.com/repos/jacurtis/laravel-blog-tutorial","labels_url":"https://api.github.com/repos/jacurtis/laravel-blog-tutorial/issues/1/labels{/name}","comments_url":"https://api.github.com/repos/jacurtis/laravel-blog-tutorial/issues/1/comments","events_url":"https://api.github.com/repos/jacurtis/laravel-blog-tutorial/issues/1/events","html_url":"https://github.com/jacurtis/laravel-blog-tutorial/issues/1","id":163575678,"number":1,"title":"xss","user":{"login":"MatthiasHertel","id":8426566,"avatar_url":"https://avatars.githubusercontent.com/u/8426566?v=3","gravatar_id":"","url":"https://api.github.com/users/MatthiasHertel","html_url":"https://github.com/MatthiasHertel","followers_url":"https://api.github.com/users/MatthiasHertel/followers","following_url":"https://api.github.com/users/MatthiasHertel/following{/other_user}","gists_url":"https://api.github.com/users/MatthiasHertel/gists{/gist_id}","starred_url":"https://api.github.com/users/MatthiasHertel/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/MatthiasHertel/subscriptions","organizations_url":"https://api.github.com/users/MatthiasHertel/orgs","repos_url":"https://api.github.com/users/MatthiasHertel/repos","events_url":"https://api.github.com/users/MatthiasHertel/events{/privacy}","received_events_url":"https://api.github.com/users/MatthiasHertel/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":5,"created_at":"2016-07-03T19:25:43Z","updated_at":"2016-07-03T21:13:25Z","closed_at":null,"body":"```\r\nlaravel-blog-tutorial/resources/views/blog/single.blade.php\r\n```\r\n```\r\n@extends('main')\r\n\r\n@section('title', \"| $post->title\")\r\n\r\n@section('content')\r\n\r\n\t<div class=\"row\">\r\n\t\t<div class=\"col-md-8 col-md-offset-2\">\r\n\t\t\t<h1>{{ $post->title }}</h1>\r\n\t\t\t<p>{{ $post->body }}</p>\r\n\t\t\t<hr>\r\n\t\t\t<p>Posted In: {{ $post->category->name }}</p>\r\n\t\t</div>\r\n\t</div>\r\n\r\n@endsection\r\n```\r\n\r\nline 3 `$post->title` is not escaped ... and vulnerable for xss ?\r\n"},"comment":{"url":"https://api.github.com/repos/jacurtis/laravel-blog-tutorial/issues/comments/230175729","html_url":"https://github.com/jacurtis/laravel-blog-tutorial/issues/1#issuecomment-230175729","issue_url":"https://api.github.com/repos/jacurtis/laravel-blog-tutorial/issues/1","id":230175729,"user":{"login":"MatthiasHertel","id":8426566,"avatar_url":"https://avatars.githubusercontent.com/u/8426566?v=3","gravatar_id":"","url":"https://api.github.com/users/MatthiasHertel","html_url":"https://github.com/MatthiasHertel","followers_url":"https://api.github.com/users/MatthiasHertel/followers","following_url":"https://api.github.com/users/MatthiasHertel/following{/other_user}","gists_url":"https://api.github.com/users/MatthiasHertel/gists{/gist_id}","starred_url":"https://api.github.com/users/MatthiasHertel/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/MatthiasHertel/subscriptions","organizations_url":"https://api.github.com/users/MatthiasHertel/orgs","repos_url":"https://api.github.com/users/MatthiasHertel/repos","events_url":"https://api.github.com/users/MatthiasHertel/events{/privacy}","received_events_url":"https://api.github.com/users/MatthiasHertel/received_events","type":"User","site_admin":false},"created_at":"2016-07-03T21:13:25Z","updated_at":"2016-07-03T21:13:25Z","body":"> I know there is no sanitize, but that is because I was under the impression that all {{...}} was escaped.\r\n\r\nbut in line 3 are no curly braces ... "}}
{"actor":{"display_login":"MatthiasHertel"}}