{"action":"created","issue":{"url":"https://api.github.com/repos/akka/akka-http/issues/275","repository_url":"https://api.github.com/repos/akka/akka-http","labels_url":"https://api.github.com/repos/akka/akka-http/issues/275/labels{/name}","comments_url":"https://api.github.com/repos/akka/akka-http/issues/275/comments","events_url":"https://api.github.com/repos/akka/akka-http/issues/275/events","html_url":"https://github.com/akka/akka-http/issues/275","id":176358351,"number":275,"title":"Review potential cross-site security issue wrt Websocket","user":{"login":"akka-ci","id":2511948,"avatar_url":"https://avatars.githubusercontent.com/u/2511948?v=3","gravatar_id":"","url":"https://api.github.com/users/akka-ci","html_url":"https://github.com/akka-ci","followers_url":"https://api.github.com/users/akka-ci/followers","following_url":"https://api.github.com/users/akka-ci/following{/other_user}","gists_url":"https://api.github.com/users/akka-ci/gists{/gist_id}","starred_url":"https://api.github.com/users/akka-ci/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/akka-ci/subscriptions","organizations_url":"https://api.github.com/users/akka-ci/orgs","repos_url":"https://api.github.com/users/akka-ci/repos","events_url":"https://api.github.com/users/akka-ci/events{/privacy}","received_events_url":"https://api.github.com/users/akka-ci/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":{"url":"https://api.github.com/repos/akka/akka-http/milestones/5","html_url":"https://github.com/akka/akka-http/milestones/http-backlog","labels_url":"https://api.github.com/repos/akka/akka-http/milestones/5/labels","id":1991250,"number":5,"title":"http-backlog","description":"","creator":{"login":"akka-ci","id":2511948,"avatar_url":"https://avatars.githubusercontent.com/u/2511948?v=3","gravatar_id":"","url":"https://api.github.com/users/akka-ci","html_url":"https://github.com/akka-ci","followers_url":"https://api.github.com/users/akka-ci/followers","following_url":"https://api.github.com/users/akka-ci/following{/other_user}","gists_url":"https://api.github.com/users/akka-ci/gists{/gist_id}","starred_url":"https://api.github.com/users/akka-ci/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/akka-ci/subscriptions","organizations_url":"https://api.github.com/users/akka-ci/orgs","repos_url":"https://api.github.com/users/akka-ci/repos","events_url":"https://api.github.com/users/akka-ci/events{/privacy}","received_events_url":"https://api.github.com/users/akka-ci/received_events","type":"User","site_admin":false},"open_issues":82,"closed_issues":14,"state":"open","created_at":"2016-09-08T14:27:28Z","updated_at":"2016-09-12T12:00:57Z","due_on":null,"closed_at":null},"comments":3,"created_at":"2016-09-12T12:00:57Z","updated_at":"2016-09-12T12:01:00Z","closed_at":null,"body":"<a href=\"https://github.com/jrudolph\"><img src=\"https://avatars.githubusercontent.com/u/9868?v=3\" align=\"left\" width=\"96\" height=\"96\" hspace=\"10\"></img></a> **Issue by [jrudolph](https://github.com/jrudolph)**\n_Thursday Sep 24, 2015 at 09:05 GMT_\n_Originally opened as https://github.com/akka/akka/issues/18549_\n\n----\n\n@fommil reminded me that browsers may not be strict enough in preventing cross-site scripting to prevent malicious sites from opening up websocket connections on the behalf of the browser user.\r\n\r\nWe need to check in which situations this can lead to problems and how to prevent insecure access (e.g. by changing the server-side Websocket API to force the developer to provide an `Origin` checker to accept incoming Websocket requests).\n"},"comment":{"url":"https://api.github.com/repos/akka/akka-http/issues/comments/246326255","html_url":"https://github.com/akka/akka-http/issues/275#issuecomment-246326255","issue_url":"https://api.github.com/repos/akka/akka-http/issues/275","id":246326255,"user":{"login":"akka-ci","id":2511948,"avatar_url":"https://avatars.githubusercontent.com/u/2511948?v=3","gravatar_id":"","url":"https://api.github.com/users/akka-ci","html_url":"https://github.com/akka-ci","followers_url":"https://api.github.com/users/akka-ci/followers","following_url":"https://api.github.com/users/akka-ci/following{/other_user}","gists_url":"https://api.github.com/users/akka-ci/gists{/gist_id}","starred_url":"https://api.github.com/users/akka-ci/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/akka-ci/subscriptions","organizations_url":"https://api.github.com/users/akka-ci/orgs","repos_url":"https://api.github.com/users/akka-ci/repos","events_url":"https://api.github.com/users/akka-ci/events{/privacy}","received_events_url":"https://api.github.com/users/akka-ci/received_events","type":"User","site_admin":false},"created_at":"2016-09-12T12:01:00Z","updated_at":"2016-09-12T12:01:00Z","body":"<a href=\"https://github.com/ktoso\"><img src=\"https://avatars.githubusercontent.com/u/120979?v=3\" align=\"left\" width=\"48\" height=\"48\" hspace=\"10\"></img></a> **Comment by [ktoso](https://github.com/ktoso)**\n_Thursday Sep 24, 2015 at 09:35 GMT_\n\n----\n\nThanks for bringing it up, definitely should be looked into - thanks!\n"}}
{"actor":{"display_login":"akka-ci"}}