{"action":"created","issue":{"url":"https://api.github.com/repos/open-company/open-company-interaction/issues/22","repository_url":"https://api.github.com/repos/open-company/open-company-interaction","labels_url":"https://api.github.com/repos/open-company/open-company-interaction/issues/22/labels{/name}","comments_url":"https://api.github.com/repos/open-company/open-company-interaction/issues/22/comments","events_url":"https://api.github.com/repos/open-company/open-company-interaction/issues/22/events","html_url":"https://github.com/open-company/open-company-interaction/pull/22","id":368642943,"node_id":"MDExOlB1bGxSZXF1ZXN0MjIxNzcxNDA3","number":22,"title":"Strip out xss tags.","user":{"login":"thepug","id":55220,"node_id":"MDQ6VXNlcjU1MjIw","avatar_url":"https://avatars3.githubusercontent.com/u/55220?v=4","gravatar_id":"","url":"https://api.github.com/users/thepug","html_url":"https://github.com/thepug","followers_url":"https://api.github.com/users/thepug/followers","following_url":"https://api.github.com/users/thepug/following{/other_user}","gists_url":"https://api.github.com/users/thepug/gists{/gist_id}","starred_url":"https://api.github.com/users/thepug/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/thepug/subscriptions","organizations_url":"https://api.github.com/users/thepug/orgs","repos_url":"https://api.github.com/users/thepug/repos","events_url":"https://api.github.com/users/thepug/events{/privacy}","received_events_url":"https://api.github.com/users/thepug/received_events","type":"User","site_admin":false},"labels":[{"id":771210670,"node_id":"MDU6TGFiZWw3NzEyMTA2NzA=","url":"https://api.github.com/repos/open-company/open-company-interaction/labels/ready%20for%20review","name":"ready for review","color":"0e8749","default":false}],"state":"open","locked":false,"assignee":{"login":"thepug","id":55220,"node_id":"MDQ6VXNlcjU1MjIw","avatar_url":"https://avatars3.githubusercontent.com/u/55220?v=4","gravatar_id":"","url":"https://api.github.com/users/thepug","html_url":"https://github.com/thepug","followers_url":"https://api.github.com/users/thepug/followers","following_url":"https://api.github.com/users/thepug/following{/other_user}","gists_url":"https://api.github.com/users/thepug/gists{/gist_id}","starred_url":"https://api.github.com/users/thepug/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/thepug/subscriptions","organizations_url":"https://api.github.com/users/thepug/orgs","repos_url":"https://api.github.com/users/thepug/repos","events_url":"https://api.github.com/users/thepug/events{/privacy}","received_events_url":"https://api.github.com/users/thepug/received_events","type":"User","site_admin":false},"assignees":[{"login":"thepug","id":55220,"node_id":"MDQ6VXNlcjU1MjIw","avatar_url":"https://avatars3.githubusercontent.com/u/55220?v=4","gravatar_id":"","url":"https://api.github.com/users/thepug","html_url":"https://github.com/thepug","followers_url":"https://api.github.com/users/thepug/followers","following_url":"https://api.github.com/users/thepug/following{/other_user}","gists_url":"https://api.github.com/users/thepug/gists{/gist_id}","starred_url":"https://api.github.com/users/thepug/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/thepug/subscriptions","organizations_url":"https://api.github.com/users/thepug/orgs","repos_url":"https://api.github.com/users/thepug/repos","events_url":"https://api.github.com/users/thepug/events{/privacy}","received_events_url":"https://api.github.com/users/thepug/received_events","type":"User","site_admin":false}],"milestone":null,"comments":1,"created_at":"2018-10-10T12:33:12Z","updated_at":"2018-10-12T08:36:56Z","closed_at":null,"author_association":"CONTRIBUTOR","pull_request":{"url":"https://api.github.com/repos/open-company/open-company-interaction/pulls/22","html_url":"https://github.com/open-company/open-company-interaction/pull/22","diff_url":"https://github.com/open-company/open-company-interaction/pull/22.diff","patch_url":"https://github.com/open-company/open-company-interaction/pull/22.patch"},"body":"Remove cross site scripting tags.\r\n\r\nSimilar to https://github.com/open-company/open-company-storage/pull/158 you will need postman to make a request to the interaction service.\r\n\r\n- add a comment with `<script>` or `<style>` tags\r\n- [ ] are they removed in the returned data?\r\n- [ ] are they not in the database?"},"comment":{"url":"https://api.github.com/repos/open-company/open-company-interaction/issues/comments/429249801","html_url":"https://github.com/open-company/open-company-interaction/pull/22#issuecomment-429249801","issue_url":"https://api.github.com/repos/open-company/open-company-interaction/issues/22","id":429249801,"node_id":"MDEyOklzc3VlQ29tbWVudDQyOTI0OTgwMQ==","user":{"login":"bago2k4","id":642704,"node_id":"MDQ6VXNlcjY0MjcwNA==","avatar_url":"https://avatars3.githubusercontent.com/u/642704?v=4","gravatar_id":"","url":"https://api.github.com/users/bago2k4","html_url":"https://github.com/bago2k4","followers_url":"https://api.github.com/users/bago2k4/followers","following_url":"https://api.github.com/users/bago2k4/following{/other_user}","gists_url":"https://api.github.com/users/bago2k4/gists{/gist_id}","starred_url":"https://api.github.com/users/bago2k4/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/bago2k4/subscriptions","organizations_url":"https://api.github.com/users/bago2k4/orgs","repos_url":"https://api.github.com/users/bago2k4/repos","events_url":"https://api.github.com/users/bago2k4/events{/privacy}","received_events_url":"https://api.github.com/users/bago2k4/received_events","type":"User","site_admin":false},"created_at":"2018-10-12T08:36:56Z","updated_at":"2018-10-12T08:36:56Z","author_association":"MEMBER","body":"@thepug getting this when i try to add a normal comment:\r\n```\r\n18-10-12 08:36:19 bagoPro.local ERROR [oc.lib.api.common:230] -\r\n                                       java.lang.Thread.run              Thread.java:  745\r\n         java.util.concurrent.ThreadPoolExecutor$Worker.run  ThreadPoolExecutor.java:  617\r\n          java.util.concurrent.ThreadPoolExecutor.runWorker  ThreadPoolExecutor.java: 1142\r\n                        java.util.concurrent.FutureTask.run          FutureTask.java:  266\r\n        java.util.concurrent.Executors$RunnableAdapter.call           Executors.java:  511\r\n                         org.httpkit.server.HttpHandler.run         RingHandler.java:  115\r\n                      ring.middleware.reload/wrap-reload/fn               reload.clj:   39\r\n                          ring.middleware.cors/wrap-cors/fn                 cors.clj:   59\r\n                                         clojure.core/apply                 core.clj:  661\r\n                                                        ...\r\n                         ring.middleware.cors/allow-origins                 cors.clj:   41\r\n                         ring.middleware.cors/allow-origins                 cors.clj:   48\r\n                         liberator.dev/wrap-trace-header/fn                  dev.clj:  216\r\n                             liberator.dev/wrap-trace-ui/fn                  dev.clj:  212\r\n                    liberator.dev/handle-and-add-trace-link                  dev.clj:  194\r\n                                liberator.dev/wrap-trace/fn                  dev.clj:  239\r\n                      ring.middleware.params/wrap-params/fn               params.clj:   67\r\n      ring.middleware.keyword-params/wrap-keyword-params/fn       keyword_params.clj:   53\r\n                                   compojure.core/routes/fn                 core.clj:  192\r\n                                         clojure.core/apply                 core.clj:  659\r\n                                                        ...\r\n                                     compojure.core/routing                 core.clj:  182\r\n                                     compojure.core/routing                 core.clj:  185\r\n                                          clojure.core/some                 core.clj: 2693\r\n                                  compojure.core/routing/fn                 core.clj:  185\r\n                                   compojure.core/routes/fn                 core.clj:  192\r\n                                         clojure.core/apply                 core.clj:  659\r\n                                                        ...\r\n                                     compojure.core/routing                 core.clj:  182\r\n                                     compojure.core/routing                 core.clj:  185\r\n                                          clojure.core/some                 core.clj: 2693\r\n                                  compojure.core/routing/fn                 core.clj:  185\r\n                       compojure.core/wrap-route-matches/fn                 core.clj:  146\r\n                          compojure.core/wrap-route-info/fn                 core.clj:  137\r\n                    compojure.core/wrap-route-middleware/fn                 core.clj:  128\r\n                            compojure.core/wrap-response/fn                 core.clj:  158\r\n                          compojure.response/eval17086/fn/G             response.clj:    7\r\n                            compojure.response/eval17164/fn             response.clj:   47\r\n                oc.interaction.api.comments/comment-list/fn             comments.clj:  132\r\n                                liberator.core/run-resource                 core.clj:  595\r\n                          liberator.core/initialize-context                 core.clj:  504\r\n                                      liberator.core/decide                 core.clj:   87\r\n                          liberator.core/service-available?                 core.clj:  502\r\n                                      liberator.core/decide                 core.clj:   87\r\n                               liberator.core/known-method?                 core.clj:  499\r\n                                      liberator.core/decide                 core.clj:   87\r\n                               liberator.core/uri-too-long?                 core.clj:  496\r\n                                      liberator.core/decide                 core.clj:   87\r\n                             liberator.core/method-allowed?                 core.clj:  493\r\n                                      liberator.core/decide                 core.clj:   87\r\n                                  liberator.core/malformed?                 core.clj:  490\r\n                                      liberator.core/decide                 core.clj:   87\r\n                                 liberator.core/authorized?                 core.clj:  487\r\n                                      liberator.core/decide                 core.clj:   87\r\n                                    liberator.core/allowed?                 core.clj:  484\r\n                                      liberator.core/decide                 core.clj:   87\r\n                       liberator.core/valid-content-header?                 core.clj:  481\r\n                                      liberator.core/decide                 core.clj:   87\r\n                         liberator.core/known-content-type?                 core.clj:  479\r\n                                      liberator.core/decide                 core.clj:   87\r\n                        liberator.core/valid-entity-length?                 core.clj:  476\r\n                                      liberator.core/decide                 core.clj:   87\r\n                                 liberator.core/is-options?                 core.clj:  473\r\n                                      liberator.core/decide                 core.clj:   87\r\n                              liberator.core/accept-exists?                 core.clj:  456\r\n                                      liberator.core/decide                 core.clj:   87\r\n                       liberator.core/media-type-available?                 core.clj:  453\r\n                                      liberator.core/decide                 core.clj:   87\r\n                     liberator.core/accept-language-exists?                 core.clj:  443\r\n                                      liberator.core/decide                 core.clj:   87\r\n                         liberator.core/language-available?                 core.clj:  433\r\n                                      liberator.core/decide                 core.clj:   87\r\n                      liberator.core/accept-charset-exists?                 core.clj:  429\r\n                                      liberator.core/decide                 core.clj:   87\r\n                     liberator.core/accept-encoding-exists?                 core.clj:  416\r\n                                      liberator.core/decide                 core.clj:   87\r\n                         liberator.core/encoding-available?                 core.clj:  399\r\n                                      liberator.core/decide                 core.clj:   87\r\n                                liberator.core/processable?                 core.clj:  395\r\n                                      liberator.core/decide                 core.clj:   82\r\n                                liberator.core/by-method/fn                 core.clj:  639\r\n             oc.interaction.api.comments/comment-list/fn/fn             comments.clj:  159\r\n             oc.interaction.api.comments/valid-new-comment?             comments.clj:   30\r\n   oc.interaction.resources.interaction/eval34080/->comment          interaction.clj:   73\r\noc.interaction.resources.interaction/eval34080/->comment/fn          interaction.clj:   80\r\n         oc.interaction.resources.interaction/->interaction          interaction.clj:   59\r\n                 oc.interaction.resources.interaction/clean          interaction.clj:   44\r\n                                                        ...\r\n                                     clojure.core/update-in                 core.clj: 6107\r\n                                     clojure.core/update-in                 core.clj: 6121\r\n                                  clojure.core/update-in/up                 core.clj: 6120\r\n                                         clojure.core/apply                 core.clj:  652\r\njava.lang.ClassCastException: java.lang.String cannot be cast to clojure.lang.IFn\r\n```"}}
{"actor":{"display_login":"bago2k4"}}