{"action":"created","issue":{"url":"https://api.github.com/repos/symphonycms/symphony-2/issues/2770","repository_url":"https://api.github.com/repos/symphonycms/symphony-2","labels_url":"https://api.github.com/repos/symphonycms/symphony-2/issues/2770/labels{/name}","comments_url":"https://api.github.com/repos/symphonycms/symphony-2/issues/2770/comments","events_url":"https://api.github.com/repos/symphonycms/symphony-2/issues/2770/events","html_url":"https://github.com/symphonycms/symphony-2/issues/2770","id":268761905,"node_id":"MDU6SXNzdWUyNjg3NjE5MDU=","number":2770,"title":"Widget methods should care for sanitizing the input","user":{"login":"michael-e","id":40072,"node_id":"MDQ6VXNlcjQwMDcy","avatar_url":"https://avatars2.githubusercontent.com/u/40072?v=4","gravatar_id":"","url":"https://api.github.com/users/michael-e","html_url":"https://github.com/michael-e","followers_url":"https://api.github.com/users/michael-e/followers","following_url":"https://api.github.com/users/michael-e/following{/other_user}","gists_url":"https://api.github.com/users/michael-e/gists{/gist_id}","starred_url":"https://api.github.com/users/michael-e/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/michael-e/subscriptions","organizations_url":"https://api.github.com/users/michael-e/orgs","repos_url":"https://api.github.com/users/michael-e/repos","events_url":"https://api.github.com/users/michael-e/events{/privacy}","received_events_url":"https://api.github.com/users/michael-e/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":{"login":"nitriques","id":771169,"node_id":"MDQ6VXNlcjc3MTE2OQ==","avatar_url":"https://avatars1.githubusercontent.com/u/771169?v=4","gravatar_id":"","url":"https://api.github.com/users/nitriques","html_url":"https://github.com/nitriques","followers_url":"https://api.github.com/users/nitriques/followers","following_url":"https://api.github.com/users/nitriques/following{/other_user}","gists_url":"https://api.github.com/users/nitriques/gists{/gist_id}","starred_url":"https://api.github.com/users/nitriques/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/nitriques/subscriptions","organizations_url":"https://api.github.com/users/nitriques/orgs","repos_url":"https://api.github.com/users/nitriques/repos","events_url":"https://api.github.com/users/nitriques/events{/privacy}","received_events_url":"https://api.github.com/users/nitriques/received_events","type":"User","site_admin":false},"assignees":[{"login":"nitriques","id":771169,"node_id":"MDQ6VXNlcjc3MTE2OQ==","avatar_url":"https://avatars1.githubusercontent.com/u/771169?v=4","gravatar_id":"","url":"https://api.github.com/users/nitriques","html_url":"https://github.com/nitriques","followers_url":"https://api.github.com/users/nitriques/followers","following_url":"https://api.github.com/users/nitriques/following{/other_user}","gists_url":"https://api.github.com/users/nitriques/gists{/gist_id}","starred_url":"https://api.github.com/users/nitriques/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/nitriques/subscriptions","organizations_url":"https://api.github.com/users/nitriques/orgs","repos_url":"https://api.github.com/users/nitriques/repos","events_url":"https://api.github.com/users/nitriques/events{/privacy}","received_events_url":"https://api.github.com/users/nitriques/received_events","type":"User","site_admin":false}],"milestone":{"url":"https://api.github.com/repos/symphonycms/symphony-2/milestones/32","html_url":"https://github.com/symphonycms/symphony-2/milestone/32","labels_url":"https://api.github.com/repos/symphonycms/symphony-2/milestones/32/labels","id":2661026,"node_id":"MDk6TWlsZXN0b25lMjY2MTAyNg==","number":32,"title":"4.0.0","description":"","creator":{"login":"nitriques","id":771169,"node_id":"MDQ6VXNlcjc3MTE2OQ==","avatar_url":"https://avatars1.githubusercontent.com/u/771169?v=4","gravatar_id":"","url":"https://api.github.com/users/nitriques","html_url":"https://github.com/nitriques","followers_url":"https://api.github.com/users/nitriques/followers","following_url":"https://api.github.com/users/nitriques/following{/other_user}","gists_url":"https://api.github.com/users/nitriques/gists{/gist_id}","starred_url":"https://api.github.com/users/nitriques/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/nitriques/subscriptions","organizations_url":"https://api.github.com/users/nitriques/orgs","repos_url":"https://api.github.com/users/nitriques/repos","events_url":"https://api.github.com/users/nitriques/events{/privacy}","received_events_url":"https://api.github.com/users/nitriques/received_events","type":"User","site_admin":false},"open_issues":37,"closed_issues":0,"state":"open","created_at":"2017-07-25T15:30:26Z","updated_at":"2018-06-12T14:56:57Z","due_on":null,"closed_at":null},"comments":8,"created_at":"2017-10-26T13:34:21Z","updated_at":"2018-10-03T10:39:45Z","closed_at":null,"author_association":"MEMBER","body":"Affected Symphony version(s) : 2.7.x (current)\r\nPHP version(s) : all\r\nOS(es) : all\r\n\r\nIn the Symphony core, the Widget class provides methods to build HTML output. Sanitizing of values is always done when Widget functions are called.\r\n\r\nWouldn't it be better to perform all sanitizing in the Widget methods?\r\n\r\nThis has initially been discussed in #2769."},"comment":{"url":"https://api.github.com/repos/symphonycms/symphony-2/issues/comments/426589466","html_url":"https://github.com/symphonycms/symphony-2/issues/2770#issuecomment-426589466","issue_url":"https://api.github.com/repos/symphonycms/symphony-2/issues/2770","id":426589466,"node_id":"MDEyOklzc3VlQ29tbWVudDQyNjU4OTQ2Ng==","user":{"login":"michael-e","id":40072,"node_id":"MDQ6VXNlcjQwMDcy","avatar_url":"https://avatars2.githubusercontent.com/u/40072?v=4","gravatar_id":"","url":"https://api.github.com/users/michael-e","html_url":"https://github.com/michael-e","followers_url":"https://api.github.com/users/michael-e/followers","following_url":"https://api.github.com/users/michael-e/following{/other_user}","gists_url":"https://api.github.com/users/michael-e/gists{/gist_id}","starred_url":"https://api.github.com/users/michael-e/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/michael-e/subscriptions","organizations_url":"https://api.github.com/users/michael-e/orgs","repos_url":"https://api.github.com/users/michael-e/repos","events_url":"https://api.github.com/users/michael-e/events{/privacy}","received_events_url":"https://api.github.com/users/michael-e/received_events","type":"User","site_admin":false},"created_at":"2018-10-03T10:39:45Z","updated_at":"2018-10-03T10:39:45Z","author_association":"MEMBER","body":"I am afraid that my knowledge of the inner workings is a bit porous… Can you explain what you mean by bottom-up and top-down rendering? (I thought that most could stay as it is, and one could just move the sanitizing to a different method that can be called with a new parameter for this behaviour.)"}}
{"actor":{"display_login":"michael-e"}}