{"action":"created","issue":{"url":"https://api.github.com/repos/open-company/open-company-storage/issues/158","repository_url":"https://api.github.com/repos/open-company/open-company-storage","labels_url":"https://api.github.com/repos/open-company/open-company-storage/issues/158/labels{/name}","comments_url":"https://api.github.com/repos/open-company/open-company-storage/issues/158/comments","events_url":"https://api.github.com/repos/open-company/open-company-storage/issues/158/events","html_url":"https://github.com/open-company/open-company-storage/pull/158","id":368207814,"node_id":"MDExOlB1bGxSZXF1ZXN0MjIxNDM3MTk1","number":158,"title":"Strip script tags to prevent xss.","user":{"login":"thepug","id":55220,"node_id":"MDQ6VXNlcjU1MjIw","avatar_url":"https://avatars3.githubusercontent.com/u/55220?v=4","gravatar_id":"","url":"https://api.github.com/users/thepug","html_url":"https://github.com/thepug","followers_url":"https://api.github.com/users/thepug/followers","following_url":"https://api.github.com/users/thepug/following{/other_user}","gists_url":"https://api.github.com/users/thepug/gists{/gist_id}","starred_url":"https://api.github.com/users/thepug/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/thepug/subscriptions","organizations_url":"https://api.github.com/users/thepug/orgs","repos_url":"https://api.github.com/users/thepug/repos","events_url":"https://api.github.com/users/thepug/events{/privacy}","received_events_url":"https://api.github.com/users/thepug/received_events","type":"User","site_admin":false},"labels":[{"id":949332761,"node_id":"MDU6TGFiZWw5NDkzMzI3NjE=","url":"https://api.github.com/repos/open-company/open-company-storage/labels/awaiting%20revision","name":"awaiting revision","color":"d4c5f9","default":false}],"state":"open","locked":false,"assignee":{"login":"thepug","id":55220,"node_id":"MDQ6VXNlcjU1MjIw","avatar_url":"https://avatars3.githubusercontent.com/u/55220?v=4","gravatar_id":"","url":"https://api.github.com/users/thepug","html_url":"https://github.com/thepug","followers_url":"https://api.github.com/users/thepug/followers","following_url":"https://api.github.com/users/thepug/following{/other_user}","gists_url":"https://api.github.com/users/thepug/gists{/gist_id}","starred_url":"https://api.github.com/users/thepug/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/thepug/subscriptions","organizations_url":"https://api.github.com/users/thepug/orgs","repos_url":"https://api.github.com/users/thepug/repos","events_url":"https://api.github.com/users/thepug/events{/privacy}","received_events_url":"https://api.github.com/users/thepug/received_events","type":"User","site_admin":false},"assignees":[{"login":"thepug","id":55220,"node_id":"MDQ6VXNlcjU1MjIw","avatar_url":"https://avatars3.githubusercontent.com/u/55220?v=4","gravatar_id":"","url":"https://api.github.com/users/thepug","html_url":"https://github.com/thepug","followers_url":"https://api.github.com/users/thepug/followers","following_url":"https://api.github.com/users/thepug/following{/other_user}","gists_url":"https://api.github.com/users/thepug/gists{/gist_id}","starred_url":"https://api.github.com/users/thepug/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/thepug/subscriptions","organizations_url":"https://api.github.com/users/thepug/orgs","repos_url":"https://api.github.com/users/thepug/repos","events_url":"https://api.github.com/users/thepug/events{/privacy}","received_events_url":"https://api.github.com/users/thepug/received_events","type":"User","site_admin":false}],"milestone":null,"comments":5,"created_at":"2018-10-09T13:22:14Z","updated_at":"2018-10-14T16:42:21Z","closed_at":null,"author_association":"CONTRIBUTOR","pull_request":{"url":"https://api.github.com/repos/open-company/open-company-storage/pulls/158","html_url":"https://github.com/open-company/open-company-storage/pull/158","diff_url":"https://github.com/open-company/open-company-storage/pull/158.diff","patch_url":"https://github.com/open-company/open-company-storage/pull/158.patch"},"body":"This change removes tags that are problems when displaying in a web browser.\r\n\r\nTo test:\r\n\r\nUse postman to make a request to the storage service.\r\n- copy the header information from a succesful post creation (Content-Type, Authorization, etc)\r\n- copy the body from the succesful post\r\n- in postman use the same body but add a `<script> alert('wtf'); </script>` or `<style>lfjd</style>` tag in the body or headline.\r\n- [x] the returned request should show the tags removd\r\n- [x] query the database to see that the tags are not stored\r\n\r\n- Repeat the same steps for board creation\r\n- change the name to include the `<script>` or `<style>` tags\r\n- [x] are the tags removed?\r\n\r\n- Repeat the same steps for invites \r\n- add a note field with the tags\r\n- [ ] are they removed?"},"comment":{"url":"https://api.github.com/repos/open-company/open-company-storage/issues/comments/429641525","html_url":"https://github.com/open-company/open-company-storage/pull/158#issuecomment-429641525","issue_url":"https://api.github.com/repos/open-company/open-company-storage/issues/158","id":429641525,"node_id":"MDEyOklzc3VlQ29tbWVudDQyOTY0MTUyNQ==","user":{"login":"thepug","id":55220,"node_id":"MDQ6VXNlcjU1MjIw","avatar_url":"https://avatars3.githubusercontent.com/u/55220?v=4","gravatar_id":"","url":"https://api.github.com/users/thepug","html_url":"https://github.com/thepug","followers_url":"https://api.github.com/users/thepug/followers","following_url":"https://api.github.com/users/thepug/following{/other_user}","gists_url":"https://api.github.com/users/thepug/gists{/gist_id}","starred_url":"https://api.github.com/users/thepug/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/thepug/subscriptions","organizations_url":"https://api.github.com/users/thepug/orgs","repos_url":"https://api.github.com/users/thepug/repos","events_url":"https://api.github.com/users/thepug/events{/privacy}","received_events_url":"https://api.github.com/users/thepug/received_events","type":"User","site_admin":false},"created_at":"2018-10-14T16:42:21Z","updated_at":"2018-10-14T16:42:21Z","author_association":"CONTRIBUTOR","body":"@bago2k4 I believe this,https://github.com/open-company/open-company-storage/pull/158#issuecomment-429526298,  is all the auth service and should be moved to that PR \r\nhttps://github.com/open-company/open-company-auth/pull/61\r\n\r\nAre you using that branch?  Any requests to port 3003 is auth service. 3001 is the storage service and relates to this PR."}}
{"actor":{"display_login":"thepug"}}