{"action":"created","issue":{"url":"https://api.github.com/repos/rbCAS/CASino/issues/153","repository_url":"https://api.github.com/repos/rbCAS/CASino","labels_url":"https://api.github.com/repos/rbCAS/CASino/issues/153/labels{/name}","comments_url":"https://api.github.com/repos/rbCAS/CASino/issues/153/comments","events_url":"https://api.github.com/repos/rbCAS/CASino/issues/153/events","html_url":"https://github.com/rbCAS/CASino/pull/153","id":131452971,"number":153,"title":"Make the generated cookies httponly","user":{"login":"fojas","id":333588,"avatar_url":"https://avatars.githubusercontent.com/u/333588?v=3","gravatar_id":"","url":"https://api.github.com/users/fojas","html_url":"https://github.com/fojas","followers_url":"https://api.github.com/users/fojas/followers","following_url":"https://api.github.com/users/fojas/following{/other_user}","gists_url":"https://api.github.com/users/fojas/gists{/gist_id}","starred_url":"https://api.github.com/users/fojas/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/fojas/subscriptions","organizations_url":"https://api.github.com/users/fojas/orgs","repos_url":"https://api.github.com/users/fojas/repos","events_url":"https://api.github.com/users/fojas/events{/privacy}","received_events_url":"https://api.github.com/users/fojas/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":1,"created_at":"2016-02-04T19:35:33Z","updated_at":"2016-05-08T18:21:16Z","closed_at":null,"pull_request":{"url":"https://api.github.com/repos/rbCAS/CASino/pulls/153","html_url":"https://github.com/rbCAS/CASino/pull/153","diff_url":"https://github.com/rbCAS/CASino/pull/153.diff","patch_url":"https://github.com/rbCAS/CASino/pull/153.patch"},"body":"The tgt cookie should be httponly to mitigate some common XSS attacks.\r\nhttps://www.owasp.org/index.php/HttpOnly#Mitigating_the_Most_Common_XSS_attack_using_HttpOnly"},"comment":{"url":"https://api.github.com/repos/rbCAS/CASino/issues/comments/217737679","html_url":"https://github.com/rbCAS/CASino/pull/153#issuecomment-217737679","issue_url":"https://api.github.com/repos/rbCAS/CASino/issues/153","id":217737679,"user":{"login":"pencil","id":812086,"avatar_url":"https://avatars.githubusercontent.com/u/812086?v=3","gravatar_id":"","url":"https://api.github.com/users/pencil","html_url":"https://github.com/pencil","followers_url":"https://api.github.com/users/pencil/followers","following_url":"https://api.github.com/users/pencil/following{/other_user}","gists_url":"https://api.github.com/users/pencil/gists{/gist_id}","starred_url":"https://api.github.com/users/pencil/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/pencil/subscriptions","organizations_url":"https://api.github.com/users/pencil/orgs","repos_url":"https://api.github.com/users/pencil/repos","events_url":"https://api.github.com/users/pencil/events{/privacy}","received_events_url":"https://api.github.com/users/pencil/received_events","type":"User","site_admin":false},"created_at":"2016-05-08T18:21:16Z","updated_at":"2016-05-08T18:21:16Z","body":"We [currently rely on the cookie being readable by JS](https://github.com/rbCAS/CASino/blob/master/app/assets/javascripts/casino/sessions.js) to automatically redirect when using multiple browser windows."}}