{"action":"closed","number":18,"pull_request":{"url":"https://api.github.com/repos/cul-it/arxiv-filemanager/pulls/18","id":211513850,"node_id":"MDExOlB1bGxSZXF1ZXN0MjExNTEzODUw","html_url":"https://github.com/cul-it/arxiv-filemanager/pull/18","diff_url":"https://github.com/cul-it/arxiv-filemanager/pull/18.diff","patch_url":"https://github.com/cul-it/arxiv-filemanager/pull/18.patch","issue_url":"https://api.github.com/repos/cul-it/arxiv-filemanager/issues/18","number":18,"state":"closed","locked":false,"title":"ARXIVNG-1136 Fix for security vulnerability that allows files to escape working directory","user":{"login":"erickpeirson","id":3451594,"node_id":"MDQ6VXNlcjM0NTE1OTQ=","avatar_url":"https://avatars2.githubusercontent.com/u/3451594?v=4","gravatar_id":"","url":"https://api.github.com/users/erickpeirson","html_url":"https://github.com/erickpeirson","followers_url":"https://api.github.com/users/erickpeirson/followers","following_url":"https://api.github.com/users/erickpeirson/following{/other_user}","gists_url":"https://api.github.com/users/erickpeirson/gists{/gist_id}","starred_url":"https://api.github.com/users/erickpeirson/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/erickpeirson/subscriptions","organizations_url":"https://api.github.com/users/erickpeirson/orgs","repos_url":"https://api.github.com/users/erickpeirson/repos","events_url":"https://api.github.com/users/erickpeirson/events{/privacy}","received_events_url":"https://api.github.com/users/erickpeirson/received_events","type":"User","site_admin":false},"body":"Added a check during extraction to ensure that the destination of the extracted file falls within the upload source directory.","created_at":"2018-08-28T18:22:11Z","updated_at":"2018-08-31T13:31:48Z","closed_at":"2018-08-31T13:31:48Z","merged_at":"2018-08-31T13:31:48Z","merge_commit_sha":"70d760f6670e86d1be13378990a3ad8b9d849b1c","assignee":null,"assignees":[],"requested_reviewers":[],"requested_teams":[],"labels":[],"milestone":null,"commits_url":"https://api.github.com/repos/cul-it/arxiv-filemanager/pulls/18/commits","review_comments_url":"https://api.github.com/repos/cul-it/arxiv-filemanager/pulls/18/comments","review_comment_url":"https://api.github.com/repos/cul-it/arxiv-filemanager/pulls/comments{/number}","comments_url":"https://api.github.com/repos/cul-it/arxiv-filemanager/issues/18/comments","statuses_url":"https://api.github.com/repos/cul-it/arxiv-filemanager/statuses/46aa860e1223f4464100addf4da3896b713951ce","head":{"label":"cul-it:bug/ARXIVNG-1136","ref":"bug/ARXIVNG-1136","sha":"46aa860e1223f4464100addf4da3896b713951ce","user":{"login":"cul-it","id":7604148,"node_id":"MDEyOk9yZ2FuaXphdGlvbjc2MDQxNDg=","avatar_url":"https://avatars2.githubusercontent.com/u/7604148?v=4","gravatar_id":"","url":"https://api.github.com/users/cul-it","html_url":"https://github.com/cul-it","followers_url":"https://api.github.com/users/cul-it/followers","following_url":"https://api.github.com/users/cul-it/following{/other_user}","gists_url":"https://api.github.com/users/cul-it/gists{/gist_id}","starred_url":"https://api.github.com/users/cul-it/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/cul-it/subscriptions","organizations_url":"https://api.github.com/users/cul-it/orgs","repos_url":"https://api.github.com/users/cul-it/repos","events_url":"https://api.github.com/users/cul-it/events{/privacy}","received_events_url":"https://api.github.com/users/cul-it/received_events","type":"Organization","site_admin":false},"repo":{"id":113456994,"node_id":"MDEwOlJlcG9zaXRvcnkxMTM0NTY5OTQ=","name":"arxiv-filemanager","full_name":"cul-it/arxiv-filemanager","owner":{"login":"cul-it","id":7604148,"node_id":"MDEyOk9yZ2FuaXphdGlvbjc2MDQxNDg=","avatar_url":"https://avatars2.githubusercontent.com/u/7604148?v=4","gravatar_id":"","url":"https://api.github.com/users/cul-it","html_url":"https://github.com/cul-it","followers_url":"https://api.github.com/users/cul-it/followers","following_url":"https://api.github.com/users/cul-it/following{/other_user}","gists_url":"https://api.github.com/users/cul-it/gists{/gist_id}","starred_url":"https://api.github.com/users/cul-it/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/cul-it/subscriptions","organizations_url":"https://api.github.com/users/cul-it/orgs","repos_url":"https://api.github.com/users/cul-it/repos","events_url":"https://api.github.com/users/cul-it/events{/privacy}","received_events_url":"https://api.github.com/users/cul-it/received_events","type":"Organization","site_admin":false},"private":false,"html_url":"https://github.com/cul-it/arxiv-filemanager","description":"File management and sanitization service","fork":false,"url":"https://api.github.com/repos/cul-it/arxiv-filemanager","forks_url":"https://api.github.com/repos/cul-it/arxiv-filemanager/forks","keys_url":"https://api.github.com/repos/cul-it/arxiv-filemanager/keys{/key_id}","collaborators_url":"https://api.github.com/repos/cul-it/arxiv-filemanager/collaborators{/collaborator}","teams_url":"https://api.github.com/repos/cul-it/arxiv-filemanager/teams","hooks_url":"https://api.github.com/repos/cul-it/arxiv-filemanager/hooks","issue_events_url":"https://api.github.com/repos/cul-it/arxiv-filemanager/issues/events{/number}","events_url":"https://api.github.com/repos/cul-it/arxiv-filemanager/events","assignees_url":"https://api.github.com/repos/cul-it/arxiv-filemanager/assignees{/user}","branches_url":"https://api.github.com/repos/cul-it/arxiv-filemanager/branches{/branch}","tags_url":"https://api.github.com/repos/cul-it/arxiv-filemanager/tags","blobs_url":"https://api.github.com/repos/cul-it/arxiv-filemanager/git/blobs{/sha}","git_tags_url":"https://api.github.com/repos/cul-it/arxiv-filemanager/git/tags{/sha}","git_refs_url":"https://api.github.com/repos/cul-it/arxiv-filemanager/git/refs{/sha}","trees_url":"https://api.github.com/repos/cul-it/arxiv-filemanager/git/trees{/sha}","statuses_url":"https://api.github.com/repos/cul-it/arxiv-filemanager/statuses/{sha}","languages_url":"https://api.github.com/repos/cul-it/arxiv-filemanager/languages","stargazers_url":"https://api.github.com/repos/cul-it/arxiv-filemanager/stargazers","contributors_url":"https://api.github.com/repos/cul-it/arxiv-filemanager/contributors","subscribers_url":"https://api.github.com/repos/cul-it/arxiv-filemanager/subscribers","subscription_url":"https://api.github.com/repos/cul-it/arxiv-filemanager/subscription","commits_url":"https://api.github.com/repos/cul-it/arxiv-filemanager/commits{/sha}","git_commits_url":"https://api.github.com/repos/cul-it/arxiv-filemanager/git/commits{/sha}","comments_url":"https://api.github.com/repos/cul-it/arxiv-filemanager/comments{/number}","issue_comment_url":"https://api.github.com/repos/cul-it/arxiv-filemanager/issues/comments{/number}","contents_url":"https://api.github.com/repos/cul-it/arxiv-filemanager/contents/{+path}","compare_url":"https://api.github.com/repos/cul-it/arxiv-filemanager/compare/{base}...{head}","merges_url":"https://api.github.com/repos/cul-it/arxiv-filemanager/merges","archive_url":"https://api.github.com/repos/cul-it/arxiv-filemanager/{archive_format}{/ref}","downloads_url":"https://api.github.com/repos/cul-it/arxiv-filemanager/downloads","issues_url":"https://api.github.com/repos/cul-it/arxiv-filemanager/issues{/number}","pulls_url":"https://api.github.com/repos/cul-it/arxiv-filemanager/pulls{/number}","milestones_url":"https://api.github.com/repos/cul-it/arxiv-filemanager/milestones{/number}","notifications_url":"https://api.github.com/repos/cul-it/arxiv-filemanager/notifications{?since,all,participating}","labels_url":"https://api.github.com/repos/cul-it/arxiv-filemanager/labels{/name}","releases_url":"https://api.github.com/repos/cul-it/arxiv-filemanager/releases{/id}","deployments_url":"https://api.github.com/repos/cul-it/arxiv-filemanager/deployments","created_at":"2017-12-07T13:55:34Z","updated_at":"2018-08-30T17:43:17Z","pushed_at":"2018-08-31T13:31:48Z","git_url":"git://github.com/cul-it/arxiv-filemanager.git","ssh_url":"git@github.com:cul-it/arxiv-filemanager.git","clone_url":"https://github.com/cul-it/arxiv-filemanager.git","svn_url":"https://github.com/cul-it/arxiv-filemanager","homepage":null,"size":19455,"stargazers_count":0,"watchers_count":0,"language":"TeX","has_issues":true,"has_projects":true,"has_downloads":true,"has_wiki":true,"has_pages":false,"forks_count":0,"mirror_url":null,"archived":false,"open_issues_count":1,"license":null,"forks":0,"open_issues":1,"watchers":0,"default_branch":"develop"}},"base":{"label":"cul-it:develop","ref":"develop","sha":"b72247e226eb47c950e29a28ca178a3491841c52","user":{"login":"cul-it","id":7604148,"node_id":"MDEyOk9yZ2FuaXphdGlvbjc2MDQxNDg=","avatar_url":"https://avatars2.githubusercontent.com/u/7604148?v=4","gravatar_id":"","url":"https://api.github.com/users/cul-it","html_url":"https://github.com/cul-it","followers_url":"https://api.github.com/users/cul-it/followers","following_url":"https://api.github.com/users/cul-it/following{/other_user}","gists_url":"https://api.github.com/users/cul-it/gists{/gist_id}","starred_url":"https://api.github.com/users/cul-it/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/cul-it/subscriptions","organizations_url":"https://api.github.com/users/cul-it/orgs","repos_url":"https://api.github.com/users/cul-it/repos","events_url":"https://api.github.com/users/cul-it/events{/privacy}","received_events_url":"https://api.github.com/users/cul-it/received_events","type":"Organization","site_admin":false},"repo":{"id":113456994,"node_id":"MDEwOlJlcG9zaXRvcnkxMTM0NTY5OTQ=","name":"arxiv-filemanager","full_name":"cul-it/arxiv-filemanager","owner":{"login":"cul-it","id":7604148,"node_id":"MDEyOk9yZ2FuaXphdGlvbjc2MDQxNDg=","avatar_url":"https://avatars2.githubusercontent.com/u/7604148?v=4","gravatar_id":"","url":"https://api.github.com/users/cul-it","html_url":"https://github.com/cul-it","followers_url":"https://api.github.com/users/cul-it/followers","following_url":"https://api.github.com/users/cul-it/following{/other_user}","gists_url":"https://api.github.com/users/cul-it/gists{/gist_id}","starred_url":"https://api.github.com/users/cul-it/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/cul-it/subscriptions","organizations_url":"https://api.github.com/users/cul-it/orgs","repos_url":"https://api.github.com/users/cul-it/repos","events_url":"https://api.github.com/users/cul-it/events{/privacy}","received_events_url":"https://api.github.com/users/cul-it/received_events","type":"Organization","site_admin":false},"private":false,"html_url":"https://github.com/cul-it/arxiv-filemanager","description":"File management and sanitization service","fork":false,"url":"https://api.github.com/repos/cul-it/arxiv-filemanager","forks_url":"https://api.github.com/repos/cul-it/arxiv-filemanager/forks","keys_url":"https://api.github.com/repos/cul-it/arxiv-filemanager/keys{/key_id}","collaborators_url":"https://api.github.com/repos/cul-it/arxiv-filemanager/collaborators{/collaborator}","teams_url":"https://api.github.com/repos/cul-it/arxiv-filemanager/teams","hooks_url":"https://api.github.com/repos/cul-it/arxiv-filemanager/hooks","issue_events_url":"https://api.github.com/repos/cul-it/arxiv-filemanager/issues/events{/number}","events_url":"https://api.github.com/repos/cul-it/arxiv-filemanager/events","assignees_url":"https://api.github.com/repos/cul-it/arxiv-filemanager/assignees{/user}","branches_url":"https://api.github.com/repos/cul-it/arxiv-filemanager/branches{/branch}","tags_url":"https://api.github.com/repos/cul-it/arxiv-filemanager/tags","blobs_url":"https://api.github.com/repos/cul-it/arxiv-filemanager/git/blobs{/sha}","git_tags_url":"https://api.github.com/repos/cul-it/arxiv-filemanager/git/tags{/sha}","git_refs_url":"https://api.github.com/repos/cul-it/arxiv-filemanager/git/refs{/sha}","trees_url":"https://api.github.com/repos/cul-it/arxiv-filemanager/git/trees{/sha}","statuses_url":"https://api.github.com/repos/cul-it/arxiv-filemanager/statuses/{sha}","languages_url":"https://api.github.com/repos/cul-it/arxiv-filemanager/languages","stargazers_url":"https://api.github.com/repos/cul-it/arxiv-filemanager/stargazers","contributors_url":"https://api.github.com/repos/cul-it/arxiv-filemanager/contributors","subscribers_url":"https://api.github.com/repos/cul-it/arxiv-filemanager/subscribers","subscription_url":"https://api.github.com/repos/cul-it/arxiv-filemanager/subscription","commits_url":"https://api.github.com/repos/cul-it/arxiv-filemanager/commits{/sha}","git_commits_url":"https://api.github.com/repos/cul-it/arxiv-filemanager/git/commits{/sha}","comments_url":"https://api.github.com/repos/cul-it/arxiv-filemanager/comments{/number}","issue_comment_url":"https://api.github.com/repos/cul-it/arxiv-filemanager/issues/comments{/number}","contents_url":"https://api.github.com/repos/cul-it/arxiv-filemanager/contents/{+path}","compare_url":"https://api.github.com/repos/cul-it/arxiv-filemanager/compare/{base}...{head}","merges_url":"https://api.github.com/repos/cul-it/arxiv-filemanager/merges","archive_url":"https://api.github.com/repos/cul-it/arxiv-filemanager/{archive_format}{/ref}","downloads_url":"https://api.github.com/repos/cul-it/arxiv-filemanager/downloads","issues_url":"https://api.github.com/repos/cul-it/arxiv-filemanager/issues{/number}","pulls_url":"https://api.github.com/repos/cul-it/arxiv-filemanager/pulls{/number}","milestones_url":"https://api.github.com/repos/cul-it/arxiv-filemanager/milestones{/number}","notifications_url":"https://api.github.com/repos/cul-it/arxiv-filemanager/notifications{?since,all,participating}","labels_url":"https://api.github.com/repos/cul-it/arxiv-filemanager/labels{/name}","releases_url":"https://api.github.com/repos/cul-it/arxiv-filemanager/releases{/id}","deployments_url":"https://api.github.com/repos/cul-it/arxiv-filemanager/deployments","created_at":"2017-12-07T13:55:34Z","updated_at":"2018-08-30T17:43:17Z","pushed_at":"2018-08-31T13:31:48Z","git_url":"git://github.com/cul-it/arxiv-filemanager.git","ssh_url":"git@github.com:cul-it/arxiv-filemanager.git","clone_url":"https://github.com/cul-it/arxiv-filemanager.git","svn_url":"https://github.com/cul-it/arxiv-filemanager","homepage":null,"size":19455,"stargazers_count":0,"watchers_count":0,"language":"TeX","has_issues":true,"has_projects":true,"has_downloads":true,"has_wiki":true,"has_pages":false,"forks_count":0,"mirror_url":null,"archived":false,"open_issues_count":1,"license":null,"forks":0,"open_issues":1,"watchers":0,"default_branch":"develop"}},"_links":{"self":{"href":"https://api.github.com/repos/cul-it/arxiv-filemanager/pulls/18"},"html":{"href":"https://github.com/cul-it/arxiv-filemanager/pull/18"},"issue":{"href":"https://api.github.com/repos/cul-it/arxiv-filemanager/issues/18"},"comments":{"href":"https://api.github.com/repos/cul-it/arxiv-filemanager/issues/18/comments"},"review_comments":{"href":"https://api.github.com/repos/cul-it/arxiv-filemanager/pulls/18/comments"},"review_comment":{"href":"https://api.github.com/repos/cul-it/arxiv-filemanager/pulls/comments{/number}"},"commits":{"href":"https://api.github.com/repos/cul-it/arxiv-filemanager/pulls/18/commits"},"statuses":{"href":"https://api.github.com/repos/cul-it/arxiv-filemanager/statuses/46aa860e1223f4464100addf4da3896b713951ce"}},"author_association":"CONTRIBUTOR","merged":true,"mergeable":null,"rebaseable":null,"mergeable_state":"unknown","merged_by":{"login":"erickpeirson","id":3451594,"node_id":"MDQ6VXNlcjM0NTE1OTQ=","avatar_url":"https://avatars2.githubusercontent.com/u/3451594?v=4","gravatar_id":"","url":"https://api.github.com/users/erickpeirson","html_url":"https://github.com/erickpeirson","followers_url":"https://api.github.com/users/erickpeirson/followers","following_url":"https://api.github.com/users/erickpeirson/following{/other_user}","gists_url":"https://api.github.com/users/erickpeirson/gists{/gist_id}","starred_url":"https://api.github.com/users/erickpeirson/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/erickpeirson/subscriptions","organizations_url":"https://api.github.com/users/erickpeirson/orgs","repos_url":"https://api.github.com/users/erickpeirson/repos","events_url":"https://api.github.com/users/erickpeirson/events{/privacy}","received_events_url":"https://api.github.com/users/erickpeirson/received_events","type":"User","site_admin":false},"comments":1,"review_comments":2,"maintainer_can_modify":false,"commits":2,"additions":90,"deletions":24,"changed_files":10}}
{"actor":{"display_login":"erickpeirson"}}