{"action":"created","issue":{"url":"https://api.github.com/repos/WordPress/gutenberg/issues/6378","repository_url":"https://api.github.com/repos/WordPress/gutenberg","labels_url":"https://api.github.com/repos/WordPress/gutenberg/issues/6378/labels{/name}","comments_url":"https://api.github.com/repos/WordPress/gutenberg/issues/6378/comments","events_url":"https://api.github.com/repos/WordPress/gutenberg/issues/6378/events","html_url":"https://github.com/WordPress/gutenberg/issues/6378","id":317182298,"number":6378,"title":"[Comodo] ModSecurity rules are triggered when using Gutenberg","user":{"login":"theleemon","id":2060659,"avatar_url":"https://avatars0.githubusercontent.com/u/2060659?v=4","gravatar_id":"","url":"https://api.github.com/users/theleemon","html_url":"https://github.com/theleemon","followers_url":"https://api.github.com/users/theleemon/followers","following_url":"https://api.github.com/users/theleemon/following{/other_user}","gists_url":"https://api.github.com/users/theleemon/gists{/gist_id}","starred_url":"https://api.github.com/users/theleemon/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/theleemon/subscriptions","organizations_url":"https://api.github.com/users/theleemon/orgs","repos_url":"https://api.github.com/users/theleemon/repos","events_url":"https://api.github.com/users/theleemon/events{/privacy}","received_events_url":"https://api.github.com/users/theleemon/received_events","type":"User","site_admin":false},"labels":[],"state":"closed","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":4,"created_at":"2018-04-24T11:24:32Z","updated_at":"2018-05-02T15:10:47Z","closed_at":"2018-04-24T12:00:50Z","author_association":"NONE","body":"<!--\r\nBEFORE POSTING YOUR ISSUE:\r\n- These comments won't show up when you submit the issue.\r\n- Try to add as much detail as possible. Be specific!\r\n- Please add the version of Gutenberg you are using in the description.\r\n- If you're requesting a new feature, explain why you'd like it to be added.\r\n- Search this repository for issues and pull requests and whether it has been fixed or reported already.\r\n- Ensure you are using the latest code before logging bugs.\r\n- Disable all plugins to ensure it's not a plugin conflict issue.\r\n- To report a security issue, please visit the WordPress HackerOne program: https://hackerone.com/wordpress.\r\n-->\r\n\r\n## Issue Overview\r\n<!-- This is a brief overview of the issue --->\r\n\r\nWhen using Gutenberg (trying to save a post, for example) in one of my sites some ModSecurity rules are triggered and my IP is blocked:\r\n\r\n`COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||MVN:/wp-json/wp/v2/users?context=edit&per_page=100||MV:/wp-json/wp/v2/users?context=edit&per_page=100||T:LITESPEED||PC:645`\r\n\r\nThe weird thing is that I'm using 4.9.5, not 4.7.\r\nIs this something that hosts will have to change in preparation for Gutenberg?\r\n\r\n## Steps to Reproduce (for bugs)\r\n<!-- Provide a link to a live example, or an unambiguous set of steps to -->\r\n<!-- reproduce this bug. Include code to reproduce, if relevant -->\r\n1.\r\n2.\r\n3.\r\n4.\r\n<!-- Provide what browser you are using and any other specifics to your setup -->\r\n\r\n## Expected Behavior\r\n<!-- If you're describing a bug, tell us what should happen -->\r\n<!-- If you're suggesting a change/improvement, tell us how it should work -->\r\n\r\n## Current Behavior\r\n<!-- If describing a bug, tell us what happens instead of the expected behavior -->\r\n<!-- If suggesting a change/improvement, explain the difference from current behavior -->\r\n\r\n## Possible Solution\r\n<!-- Not obligatory, but suggest a fix/reason for the bug, -->\r\n<!-- or ideas how to implement the addition or change -->\r\n\r\n## Screenshots / Video\r\n<!-- Visual records are oxygen for others to understand what you are sharing -->\r\n\r\n## Related Issues and/or PRs\r\n<!-- List related issues or PRs against other branches -->\r\n\r\n"},"comment":{"url":"https://api.github.com/repos/WordPress/gutenberg/issues/comments/386012270","html_url":"https://github.com/WordPress/gutenberg/issues/6378#issuecomment-386012270","issue_url":"https://api.github.com/repos/WordPress/gutenberg/issues/6378","id":386012270,"user":{"login":"theleemon","id":2060659,"avatar_url":"https://avatars0.githubusercontent.com/u/2060659?v=4","gravatar_id":"","url":"https://api.github.com/users/theleemon","html_url":"https://github.com/theleemon","followers_url":"https://api.github.com/users/theleemon/followers","following_url":"https://api.github.com/users/theleemon/following{/other_user}","gists_url":"https://api.github.com/users/theleemon/gists{/gist_id}","starred_url":"https://api.github.com/users/theleemon/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/theleemon/subscriptions","organizations_url":"https://api.github.com/users/theleemon/orgs","repos_url":"https://api.github.com/users/theleemon/repos","events_url":"https://api.github.com/users/theleemon/events{/privacy}","received_events_url":"https://api.github.com/users/theleemon/received_events","type":"User","site_admin":false},"created_at":"2018-05-02T15:10:47Z","updated_at":"2018-05-02T15:10:47Z","author_association":"NONE","body":"After some back-and-forth conversation, this is the response from the Comodo people:\r\n\r\n> Logs provided by your hosting doesn't contain any information which could help create any excludes for your plugin. Developers of plugin may try to use wordpress cookies in their sessions. After investigation of issue and internal discussion about it was decided not to exclude this rule from ruleset and don't make any changes to it.  Try to request your hosting to disable this rule for you.\r\n\r\nSo we are back at square one. :("}}
{"actor":{"display_login":"theleemon"}}