{"action":"opened","issue":{"url":"https://api.github.com/repos/Kunena/Kunena-Forum/issues/4434","repository_url":"https://api.github.com/repos/Kunena/Kunena-Forum","labels_url":"https://api.github.com/repos/Kunena/Kunena-Forum/issues/4434/labels{/name}","comments_url":"https://api.github.com/repos/Kunena/Kunena-Forum/issues/4434/comments","events_url":"https://api.github.com/repos/Kunena/Kunena-Forum/issues/4434/events","html_url":"https://github.com/Kunena/Kunena-Forum/issues/4434","id":174287069,"number":4434,"title":"JavaScript source regenerated every time the BBCode editor is shown","user":{"login":"demis-palma","id":1609992,"avatar_url":"https://avatars.githubusercontent.com/u/1609992?v=3","gravatar_id":"","url":"https://api.github.com/users/demis-palma","html_url":"https://github.com/demis-palma","followers_url":"https://api.github.com/users/demis-palma/followers","following_url":"https://api.github.com/users/demis-palma/following{/other_user}","gists_url":"https://api.github.com/users/demis-palma/gists{/gist_id}","starred_url":"https://api.github.com/users/demis-palma/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/demis-palma/subscriptions","organizations_url":"https://api.github.com/users/demis-palma/orgs","repos_url":"https://api.github.com/users/demis-palma/repos","events_url":"https://api.github.com/users/demis-palma/events{/privacy}","received_events_url":"https://api.github.com/users/demis-palma/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":0,"created_at":"2016-08-31T14:24:07Z","updated_at":"2016-08-31T14:24:07Z","closed_at":null,"body":"The file components/com_kunena/template/crypsis/assets/js/markitup.editor.js is being regenerated  every time the BBCode editor is shown.\r\nThis is not safe and is prone to collisions in case two different users create / edit / reply two different posts at the same time.\r\nAs a side effect, my website audit / monitoring service sends me an alert for JavaScript source alteration on the server every time an user creates / edits / replies to one post.\r\n\r\nI would suggest to find a cleaner way to pass data to JavaScript, or, at least, since the file contains code that depends on the template settings, it should be regenerated after changing the template settings, not every time the BBCode editor is shown.\r\n"}}
{"actor":{"display_login":"demis-palma"}}