{"action":"created","issue":{"url":"https://api.github.com/repos/python/cpython/issues/10627","repository_url":"https://api.github.com/repos/python/cpython","labels_url":"https://api.github.com/repos/python/cpython/issues/10627/labels{/name}","comments_url":"https://api.github.com/repos/python/cpython/issues/10627/comments","events_url":"https://api.github.com/repos/python/cpython/issues/10627/events","html_url":"https://github.com/python/cpython/pull/10627","id":382915422,"node_id":"MDExOlB1bGxSZXF1ZXN0MjMyNTEwMDE4","number":10627,"title":"bpo-35278: Sanitize tempfile prefix to prevent directory treversal","user":{"login":"Thorleon","id":11626625,"node_id":"MDQ6VXNlcjExNjI2NjI1","avatar_url":"https://avatars0.githubusercontent.com/u/11626625?v=4","gravatar_id":"","url":"https://api.github.com/users/Thorleon","html_url":"https://github.com/Thorleon","followers_url":"https://api.github.com/users/Thorleon/followers","following_url":"https://api.github.com/users/Thorleon/following{/other_user}","gists_url":"https://api.github.com/users/Thorleon/gists{/gist_id}","starred_url":"https://api.github.com/users/Thorleon/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/Thorleon/subscriptions","organizations_url":"https://api.github.com/users/Thorleon/orgs","repos_url":"https://api.github.com/users/Thorleon/repos","events_url":"https://api.github.com/users/Thorleon/events{/privacy}","received_events_url":"https://api.github.com/users/Thorleon/received_events","type":"User","site_admin":false},"labels":[{"id":536945571,"node_id":"MDU6TGFiZWw1MzY5NDU1NzE=","url":"https://api.github.com/repos/python/cpython/labels/CLA%20not%20signed","name":"CLA not signed","color":"b60205","default":false}],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":0,"created_at":"2018-11-21T01:20:28Z","updated_at":"2018-11-21T01:20:31Z","closed_at":null,"author_association":"NONE","pull_request":{"url":"https://api.github.com/repos/python/cpython/pulls/10627","html_url":"https://github.com/python/cpython/pull/10627","diff_url":"https://github.com/python/cpython/pull/10627.diff","patch_url":"https://github.com/python/cpython/pull/10627.patch"},"body":"- Fixied `_sanitize_params` function in order to detect malicious path\r\n- Added tests\r\n\r\nIssue:\r\nhttps://bugs.python.org/issue35278\r\n\n\n<!-- issue-number: bpo-35278 -->\nhttps://bugs.python.org/issue35278\n<!-- /issue-number -->\n"},"comment":{"url":"https://api.github.com/repos/python/cpython/issues/comments/440492727","html_url":"https://github.com/python/cpython/pull/10627#issuecomment-440492727","issue_url":"https://api.github.com/repos/python/cpython/issues/10627","id":440492727,"node_id":"MDEyOklzc3VlQ29tbWVudDQ0MDQ5MjcyNw==","user":{"login":"the-knights-who-say-ni","id":18121554,"node_id":"MDQ6VXNlcjE4MTIxNTU0","avatar_url":"https://avatars0.githubusercontent.com/u/18121554?v=4","gravatar_id":"","url":"https://api.github.com/users/the-knights-who-say-ni","html_url":"https://github.com/the-knights-who-say-ni","followers_url":"https://api.github.com/users/the-knights-who-say-ni/followers","following_url":"https://api.github.com/users/the-knights-who-say-ni/following{/other_user}","gists_url":"https://api.github.com/users/the-knights-who-say-ni/gists{/gist_id}","starred_url":"https://api.github.com/users/the-knights-who-say-ni/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/the-knights-who-say-ni/subscriptions","organizations_url":"https://api.github.com/users/the-knights-who-say-ni/orgs","repos_url":"https://api.github.com/users/the-knights-who-say-ni/repos","events_url":"https://api.github.com/users/the-knights-who-say-ni/events{/privacy}","received_events_url":"https://api.github.com/users/the-knights-who-say-ni/received_events","type":"User","site_admin":false},"created_at":"2018-11-21T01:20:31Z","updated_at":"2018-11-21T01:20:31Z","author_association":"NONE","body":"Hello, and thanks for your contribution!\n\nI'm a bot set up to make sure that the project can legally accept your contribution by verifying you have signed the [PSF contributor agreement](https://www.python.org/psf/contrib/contrib-form/) (CLA).\n\nOur records indicate we have not received your CLA. For legal reasons we need you to sign this before we can look at your contribution. Please follow [the steps outlined in the CPython devguide](https://devguide.python.org/pullrequest/#licensing) to rectify this issue.\n\nIf you have recently signed the CLA, please wait at least one business day\nbefore our records are updated.\n\n\nYou can [check yourself](https://check-python-cla.herokuapp.com/) to see if the CLA has been received.\n\nThanks again for your contribution, we look forward to reviewing it!\n"}}
{"actor":{"display_login":"the-knights-who-say-ni"}}