{"action":"closed","issue":{"url":"https://api.github.com/repos/OWASP/ASVS/issues/240","repository_url":"https://api.github.com/repos/OWASP/ASVS","labels_url":"https://api.github.com/repos/OWASP/ASVS/issues/240/labels{/name}","comments_url":"https://api.github.com/repos/OWASP/ASVS/issues/240/comments","events_url":"https://api.github.com/repos/OWASP/ASVS/issues/240/events","html_url":"https://github.com/OWASP/ASVS/issues/240","id":276617762,"node_id":"MDU6SXNzdWUyNzY2MTc3NjI=","number":240,"title":"V4 Access Control: Maybe we should add something about the secure use of direct object references","user":{"login":"tjherzog","id":10156899,"node_id":"MDQ6VXNlcjEwMTU2ODk5","avatar_url":"https://avatars3.githubusercontent.com/u/10156899?v=4","gravatar_id":"","url":"https://api.github.com/users/tjherzog","html_url":"https://github.com/tjherzog","followers_url":"https://api.github.com/users/tjherzog/followers","following_url":"https://api.github.com/users/tjherzog/following{/other_user}","gists_url":"https://api.github.com/users/tjherzog/gists{/gist_id}","starred_url":"https://api.github.com/users/tjherzog/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/tjherzog/subscriptions","organizations_url":"https://api.github.com/users/tjherzog/orgs","repos_url":"https://api.github.com/users/tjherzog/repos","events_url":"https://api.github.com/users/tjherzog/events{/privacy}","received_events_url":"https://api.github.com/users/tjherzog/received_events","type":"User","site_admin":false},"labels":[{"id":143254078,"node_id":"MDU6TGFiZWwxNDMyNTQwNzg=","url":"https://api.github.com/repos/OWASP/ASVS/labels/enhancement","name":"enhancement","color":"84b6eb","default":true}],"state":"closed","locked":false,"assignee":{"login":"jmanico","id":531465,"node_id":"MDQ6VXNlcjUzMTQ2NQ==","avatar_url":"https://avatars2.githubusercontent.com/u/531465?v=4","gravatar_id":"","url":"https://api.github.com/users/jmanico","html_url":"https://github.com/jmanico","followers_url":"https://api.github.com/users/jmanico/followers","following_url":"https://api.github.com/users/jmanico/following{/other_user}","gists_url":"https://api.github.com/users/jmanico/gists{/gist_id}","starred_url":"https://api.github.com/users/jmanico/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/jmanico/subscriptions","organizations_url":"https://api.github.com/users/jmanico/orgs","repos_url":"https://api.github.com/users/jmanico/repos","events_url":"https://api.github.com/users/jmanico/events{/privacy}","received_events_url":"https://api.github.com/users/jmanico/received_events","type":"User","site_admin":false},"assignees":[{"login":"jmanico","id":531465,"node_id":"MDQ6VXNlcjUzMTQ2NQ==","avatar_url":"https://avatars2.githubusercontent.com/u/531465?v=4","gravatar_id":"","url":"https://api.github.com/users/jmanico","html_url":"https://github.com/jmanico","followers_url":"https://api.github.com/users/jmanico/followers","following_url":"https://api.github.com/users/jmanico/following{/other_user}","gists_url":"https://api.github.com/users/jmanico/gists{/gist_id}","starred_url":"https://api.github.com/users/jmanico/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/jmanico/subscriptions","organizations_url":"https://api.github.com/users/jmanico/orgs","repos_url":"https://api.github.com/users/jmanico/repos","events_url":"https://api.github.com/users/jmanico/events{/privacy}","received_events_url":"https://api.github.com/users/jmanico/received_events","type":"User","site_admin":false}],"milestone":{"url":"https://api.github.com/repos/OWASP/ASVS/milestones/5","html_url":"https://github.com/OWASP/ASVS/milestone/5","labels_url":"https://api.github.com/repos/OWASP/ASVS/milestones/5/labels","id":1369881,"node_id":"MDk6TWlsZXN0b25lMTM2OTg4MQ==","number":5,"title":"3.1","description":"The next version of ASVS, aligned with OWASP Top 10 2017 and Testing Guide 4.0. Release at AppSec EU 2018.","creator":{"login":"vanderaj","id":5029993,"node_id":"MDQ6VXNlcjUwMjk5OTM=","avatar_url":"https://avatars3.githubusercontent.com/u/5029993?v=4","gravatar_id":"","url":"https://api.github.com/users/vanderaj","html_url":"https://github.com/vanderaj","followers_url":"https://api.github.com/users/vanderaj/followers","following_url":"https://api.github.com/users/vanderaj/following{/other_user}","gists_url":"https://api.github.com/users/vanderaj/gists{/gist_id}","starred_url":"https://api.github.com/users/vanderaj/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/vanderaj/subscriptions","organizations_url":"https://api.github.com/users/vanderaj/orgs","repos_url":"https://api.github.com/users/vanderaj/repos","events_url":"https://api.github.com/users/vanderaj/events{/privacy}","received_events_url":"https://api.github.com/users/vanderaj/received_events","type":"User","site_admin":false},"open_issues":70,"closed_issues":57,"state":"open","created_at":"2015-10-22T08:52:53Z","updated_at":"2018-07-06T14:00:54Z","due_on":"2018-07-02T07:00:00Z","closed_at":null},"comments":2,"created_at":"2017-11-24T13:31:24Z","updated_at":"2018-07-06T14:00:53Z","closed_at":"2018-07-06T14:00:53Z","author_association":"NONE","body":"Something like: \r\nVerify that no direct object references are accessible to users. Instead use only indirect references (e.g. cryptographically strong random values that “map to” the original values)."}}
{"actor":{"display_login":"vanderaj"}}