{"action":"opened","issue":{"url":"https://api.github.com/repos/guohongze/adminset/issues/86","repository_url":"https://api.github.com/repos/guohongze/adminset","labels_url":"https://api.github.com/repos/guohongze/adminset/issues/86/labels{/name}","comments_url":"https://api.github.com/repos/guohongze/adminset/issues/86/comments","events_url":"https://api.github.com/repos/guohongze/adminset/issues/86/events","html_url":"https://github.com/guohongze/adminset/issues/86","id":394853805,"node_id":"MDU6SXNzdWUzOTQ4NTM4MDU=","number":86,"title":"安全问题","user":{"login":"360CodeSafe","id":39950310,"node_id":"MDQ6VXNlcjM5OTUwMzEw","avatar_url":"https://avatars0.githubusercontent.com/u/39950310?v=4","gravatar_id":"","url":"https://api.github.com/users/360CodeSafe","html_url":"https://github.com/360CodeSafe","followers_url":"https://api.github.com/users/360CodeSafe/followers","following_url":"https://api.github.com/users/360CodeSafe/following{/other_user}","gists_url":"https://api.github.com/users/360CodeSafe/gists{/gist_id}","starred_url":"https://api.github.com/users/360CodeSafe/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/360CodeSafe/subscriptions","organizations_url":"https://api.github.com/users/360CodeSafe/orgs","repos_url":"https://api.github.com/users/360CodeSafe/repos","events_url":"https://api.github.com/users/360CodeSafe/events{/privacy}","received_events_url":"https://api.github.com/users/360CodeSafe/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":0,"created_at":"2018-12-30T07:51:47Z","updated_at":"2018-12-30T07:51:47Z","closed_at":null,"author_association":"NONE","body":"您好，我是奇虎360代码卫士团队的工作人员，在我们的开源项目检测中发现项目中存在路径遍历安全风险，详细信息如下：\r\n\r\n在delivery/deli.py 203行\r\n![image](https://user-images.githubusercontent.com/39950310/50544877-7875c300-0c3e-11e9-9b40-daf592610793.png)\r\n当logname为类似\"../../important/server.config\"的字符串时，程序将删除重要的文件，希望可以使用白名单进行限制。\r\n\r\n由于我对adminset不是很了解，希望你有时间可以看一下"}}
{"actor":{"display_login":"360CodeSafe"}}