{"action":"created","issue":{"url":"https://api.github.com/repos/nationalarchives/tna-forms/issues/27","repository_url":"https://api.github.com/repos/nationalarchives/tna-forms","labels_url":"https://api.github.com/repos/nationalarchives/tna-forms/issues/27/labels{/name}","comments_url":"https://api.github.com/repos/nationalarchives/tna-forms/issues/27/comments","events_url":"https://api.github.com/repos/nationalarchives/tna-forms/issues/27/events","html_url":"https://github.com/nationalarchives/tna-forms/issues/27","id":344888752,"node_id":"MDU6SXNzdWUzNDQ4ODg3NTI=","number":27,"title":"Your Views form spam","user":{"login":"grange85","id":783875,"node_id":"MDQ6VXNlcjc4Mzg3NQ==","avatar_url":"https://avatars2.githubusercontent.com/u/783875?v=4","gravatar_id":"","url":"https://api.github.com/users/grange85","html_url":"https://github.com/grange85","followers_url":"https://api.github.com/users/grange85/followers","following_url":"https://api.github.com/users/grange85/following{/other_user}","gists_url":"https://api.github.com/users/grange85/gists{/gist_id}","starred_url":"https://api.github.com/users/grange85/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/grange85/subscriptions","organizations_url":"https://api.github.com/users/grange85/orgs","repos_url":"https://api.github.com/users/grange85/repos","events_url":"https://api.github.com/users/grange85/events{/privacy}","received_events_url":"https://api.github.com/users/grange85/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":{"login":"domingobishop","id":6369243,"node_id":"MDQ6VXNlcjYzNjkyNDM=","avatar_url":"https://avatars1.githubusercontent.com/u/6369243?v=4","gravatar_id":"","url":"https://api.github.com/users/domingobishop","html_url":"https://github.com/domingobishop","followers_url":"https://api.github.com/users/domingobishop/followers","following_url":"https://api.github.com/users/domingobishop/following{/other_user}","gists_url":"https://api.github.com/users/domingobishop/gists{/gist_id}","starred_url":"https://api.github.com/users/domingobishop/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/domingobishop/subscriptions","organizations_url":"https://api.github.com/users/domingobishop/orgs","repos_url":"https://api.github.com/users/domingobishop/repos","events_url":"https://api.github.com/users/domingobishop/events{/privacy}","received_events_url":"https://api.github.com/users/domingobishop/received_events","type":"User","site_admin":false},"assignees":[{"login":"domingobishop","id":6369243,"node_id":"MDQ6VXNlcjYzNjkyNDM=","avatar_url":"https://avatars1.githubusercontent.com/u/6369243?v=4","gravatar_id":"","url":"https://api.github.com/users/domingobishop","html_url":"https://github.com/domingobishop","followers_url":"https://api.github.com/users/domingobishop/followers","following_url":"https://api.github.com/users/domingobishop/following{/other_user}","gists_url":"https://api.github.com/users/domingobishop/gists{/gist_id}","starred_url":"https://api.github.com/users/domingobishop/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/domingobishop/subscriptions","organizations_url":"https://api.github.com/users/domingobishop/orgs","repos_url":"https://api.github.com/users/domingobishop/repos","events_url":"https://api.github.com/users/domingobishop/events{/privacy}","received_events_url":"https://api.github.com/users/domingobishop/received_events","type":"User","site_admin":false}],"milestone":null,"comments":1,"created_at":"2018-07-26T15:16:34Z","updated_at":"2018-07-30T09:50:59Z","closed_at":null,"author_association":"MEMBER","body":"The Your Views form allowed through thousands of spam email that weren't caught by the \"honeypot\" - if we could look into this - let me know what you need to try and figure out how this happened?"},"comment":{"url":"https://api.github.com/repos/nationalarchives/tna-forms/issues/comments/408809585","html_url":"https://github.com/nationalarchives/tna-forms/issues/27#issuecomment-408809585","issue_url":"https://api.github.com/repos/nationalarchives/tna-forms/issues/27","id":408809585,"node_id":"MDEyOklzc3VlQ29tbWVudDQwODgwOTU4NQ==","user":{"login":"mcieslak","id":13164842,"node_id":"MDQ6VXNlcjEzMTY0ODQy","avatar_url":"https://avatars1.githubusercontent.com/u/13164842?v=4","gravatar_id":"","url":"https://api.github.com/users/mcieslak","html_url":"https://github.com/mcieslak","followers_url":"https://api.github.com/users/mcieslak/followers","following_url":"https://api.github.com/users/mcieslak/following{/other_user}","gists_url":"https://api.github.com/users/mcieslak/gists{/gist_id}","starred_url":"https://api.github.com/users/mcieslak/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/mcieslak/subscriptions","organizations_url":"https://api.github.com/users/mcieslak/orgs","repos_url":"https://api.github.com/users/mcieslak/repos","events_url":"https://api.github.com/users/mcieslak/events{/privacy}","received_events_url":"https://api.github.com/users/mcieslak/received_events","type":"User","site_admin":false},"created_at":"2018-07-30T09:50:59Z","updated_at":"2018-07-30T09:50:59Z","author_association":"MEMBER","body":"Do we have many individual email addresses on our site? If so they should definitely be encrypted to avoid spam but as a general approach we should route all queries to our contact forms. Only certain exceptions should be routed directly to an email address...the 'Education service general enquiries' is one example. \r\n\r\nI think in the case of this spam attack it seems the robot has somehow captured the required fields for the form and is bypassing the actual page & automatically submitting - which is probably why the honeypot is not working. Chris may have a different theory!\r\n\r\nWe definitely need to find out if any other forms/inboxes are being hit with Spam...and implement a more rigorous solution."}}
{"actor":{"display_login":"mcieslak"}}