{"action":"created","issue":{"url":"https://api.github.com/repos/meanjs/mean/issues/1127","labels_url":"https://api.github.com/repos/meanjs/mean/issues/1127/labels{/name}","comments_url":"https://api.github.com/repos/meanjs/mean/issues/1127/comments","events_url":"https://api.github.com/repos/meanjs/mean/issues/1127/events","html_url":"https://github.com/meanjs/mean/issues/1127","id":124663935,"number":1127,"title":"Profile Image encoding with Validator.escape","user":{"login":"mleanos","id":5613734,"avatar_url":"https://avatars.githubusercontent.com/u/5613734?v=3","gravatar_id":"","url":"https://api.github.com/users/mleanos","html_url":"https://github.com/mleanos","followers_url":"https://api.github.com/users/mleanos/followers","following_url":"https://api.github.com/users/mleanos/following{/other_user}","gists_url":"https://api.github.com/users/mleanos/gists{/gist_id}","starred_url":"https://api.github.com/users/mleanos/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/mleanos/subscriptions","organizations_url":"https://api.github.com/users/mleanos/orgs","repos_url":"https://api.github.com/users/mleanos/repos","events_url":"https://api.github.com/users/mleanos/events{/privacy}","received_events_url":"https://api.github.com/users/mleanos/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/meanjs/mean/labels/bug","name":"bug","color":"fc2929"}],"state":"open","locked":false,"assignee":{"login":"lirantal","id":316371,"avatar_url":"https://avatars.githubusercontent.com/u/316371?v=3","gravatar_id":"","url":"https://api.github.com/users/lirantal","html_url":"https://github.com/lirantal","followers_url":"https://api.github.com/users/lirantal/followers","following_url":"https://api.github.com/users/lirantal/following{/other_user}","gists_url":"https://api.github.com/users/lirantal/gists{/gist_id}","starred_url":"https://api.github.com/users/lirantal/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/lirantal/subscriptions","organizations_url":"https://api.github.com/users/lirantal/orgs","repos_url":"https://api.github.com/users/lirantal/repos","events_url":"https://api.github.com/users/lirantal/events{/privacy}","received_events_url":"https://api.github.com/users/lirantal/received_events","type":"User","site_admin":false},"milestone":{"url":"https://api.github.com/repos/meanjs/mean/milestones/6","html_url":"https://github.com/meanjs/mean/milestones/0.5.0","labels_url":"https://api.github.com/repos/meanjs/mean/milestones/6/labels","id":1213421,"number":6,"title":"0.5.0","description":"","creator":{"login":"ilanbiala","id":3695164,"avatar_url":"https://avatars.githubusercontent.com/u/3695164?v=3","gravatar_id":"","url":"https://api.github.com/users/ilanbiala","html_url":"https://github.com/ilanbiala","followers_url":"https://api.github.com/users/ilanbiala/followers","following_url":"https://api.github.com/users/ilanbiala/following{/other_user}","gists_url":"https://api.github.com/users/ilanbiala/gists{/gist_id}","starred_url":"https://api.github.com/users/ilanbiala/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/ilanbiala/subscriptions","organizations_url":"https://api.github.com/users/ilanbiala/orgs","repos_url":"https://api.github.com/users/ilanbiala/repos","events_url":"https://api.github.com/users/ilanbiala/events{/privacy}","received_events_url":"https://api.github.com/users/ilanbiala/received_events","type":"User","site_admin":false},"open_issues":22,"closed_issues":51,"state":"open","created_at":"2015-07-17T18:54:42Z","updated_at":"2016-01-15T22:57:44Z","due_on":null,"closed_at":null},"comments":9,"created_at":"2016-01-03T18:38:57Z","updated_at":"2016-01-16T16:59:11Z","closed_at":null,"body":"With the new security enhancement for thwarting xss attacks implemented with https://github.com/meanjs/mean/commit/b9e3fd1625b0e766331b9a673bf2c800f3fed1c1, the Profile Image stored in the browsers User object is now *encoded* with the escaping characters. When loading the image from the browser's User object, the image cannot be found; due to image path containing the escape characters.\r\n\r\nTo reproduce.. \r\n1) Log in with a User\r\n2) Do a hard refresh (CTRL+F5)\r\n\r\nYou'll notice that the image cannot be found, and when viewing the User object from the source of the page you'll see that the `profileImageURL` field is *encoded* with the escaping characters.\r\n\r\n![profile-image-validator-escape-chars-issue](https://cloud.githubusercontent.com/assets/5613734/12080081/b522c826-b204-11e5-948e-c4d2cff353c3.png)\r\n\r\nThe fix that comes to mind first is to *decode* (or remove escaping characters) from the User object data when it's loaded into the Authentication service. \r\n\r\n@lirantal Is this what you were referring to about the Angular changes that might need to be made? \r\n\r\nAnyone have any additional thoughts, or ideas? One thing that might be helpful, is for someone else to run through some test cases & watch the behavior of the User object. I seem to be experiencing odd behavior with the data that's loaded into the browser object; see these comments https://github.com/meanjs/mean/pull/1119#issuecomment-167564509 & https://github.com/meanjs/mean/pull/1119#issuecomment-167673102\r\n"},"comment":{"url":"https://api.github.com/repos/meanjs/mean/issues/comments/172227802","html_url":"https://github.com/meanjs/mean/issues/1127#issuecomment-172227802","issue_url":"https://api.github.com/repos/meanjs/mean/issues/1127","id":172227802,"user":{"login":"lirantal","id":316371,"avatar_url":"https://avatars.githubusercontent.com/u/316371?v=3","gravatar_id":"","url":"https://api.github.com/users/lirantal","html_url":"https://github.com/lirantal","followers_url":"https://api.github.com/users/lirantal/followers","following_url":"https://api.github.com/users/lirantal/following{/other_user}","gists_url":"https://api.github.com/users/lirantal/gists{/gist_id}","starred_url":"https://api.github.com/users/lirantal/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/lirantal/subscriptions","organizations_url":"https://api.github.com/users/lirantal/orgs","repos_url":"https://api.github.com/users/lirantal/repos","events_url":"https://api.github.com/users/lirantal/events{/privacy}","received_events_url":"https://api.github.com/users/lirantal/received_events","type":"User","site_admin":false},"created_at":"2016-01-16T16:59:11Z","updated_at":"2016-01-16T16:59:11Z","body":"Thanks, I'll review later and merge."}}