{"action":"created","issue":{"url":"https://api.github.com/repos/go-gitea/gitea/issues/20","repository_url":"https://api.github.com/repos/go-gitea/gitea","labels_url":"https://api.github.com/repos/go-gitea/gitea/issues/20/labels{/name}","comments_url":"https://api.github.com/repos/go-gitea/gitea/issues/20/comments","events_url":"https://api.github.com/repos/go-gitea/gitea/issues/20/events","html_url":"https://github.com/go-gitea/gitea/pull/20","id":186968719,"node_id":"MDExOlB1bGxSZXF1ZXN0OTIwODk5NTI=","number":20,"title":"Fixes possible vulnerabilities with keyword hijacking","user":{"login":"ghost","id":10137,"node_id":"MDQ6VXNlcjEwMTM3","avatar_url":"https://avatars3.githubusercontent.com/u/10137?v=4","gravatar_id":"","url":"https://api.github.com/users/ghost","html_url":"https://github.com/ghost","followers_url":"https://api.github.com/users/ghost/followers","following_url":"https://api.github.com/users/ghost/following{/other_user}","gists_url":"https://api.github.com/users/ghost/gists{/gist_id}","starred_url":"https://api.github.com/users/ghost/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/ghost/subscriptions","organizations_url":"https://api.github.com/users/ghost/orgs","repos_url":"https://api.github.com/users/ghost/repos","events_url":"https://api.github.com/users/ghost/events{/privacy}","received_events_url":"https://api.github.com/users/ghost/received_events","type":"User","site_admin":false},"labels":[{"id":472744938,"node_id":"MDU6TGFiZWw0NzI3NDQ5Mzg=","url":"https://api.github.com/repos/go-gitea/gitea/labels/kind/bug","name":"kind/bug","color":"ee0701","default":false},{"id":475283668,"node_id":"MDU6TGFiZWw0NzUyODM2Njg=","url":"https://api.github.com/repos/go-gitea/gitea/labels/lgtm/done","name":"lgtm/done","color":"0e8a16","default":false},{"id":474799156,"node_id":"MDU6TGFiZWw0NzQ3OTkxNTY=","url":"https://api.github.com/repos/go-gitea/gitea/labels/priority/critical","name":"priority/critical","color":"fbca04","default":false}],"state":"closed","locked":false,"assignee":null,"assignees":[],"milestone":{"url":"https://api.github.com/repos/go-gitea/gitea/milestones/1","html_url":"https://github.com/go-gitea/gitea/milestone/1","labels_url":"https://api.github.com/repos/go-gitea/gitea/milestones/1/labels","id":2110320,"node_id":"MDk6TWlsZXN0b25lMjExMDMyMA==","number":1,"title":"1.0.0","description":"","creator":{"login":"tboerger","id":156964,"node_id":"MDQ6VXNlcjE1Njk2NA==","avatar_url":"https://avatars3.githubusercontent.com/u/156964?v=4","gravatar_id":"","url":"https://api.github.com/users/tboerger","html_url":"https://github.com/tboerger","followers_url":"https://api.github.com/users/tboerger/followers","following_url":"https://api.github.com/users/tboerger/following{/other_user}","gists_url":"https://api.github.com/users/tboerger/gists{/gist_id}","starred_url":"https://api.github.com/users/tboerger/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/tboerger/subscriptions","organizations_url":"https://api.github.com/users/tboerger/orgs","repos_url":"https://api.github.com/users/tboerger/repos","events_url":"https://api.github.com/users/tboerger/events{/privacy}","received_events_url":"https://api.github.com/users/tboerger/received_events","type":"User","site_admin":false},"open_issues":0,"closed_issues":284,"state":"closed","created_at":"2016-11-02T18:06:55Z","updated_at":"2016-12-29T10:26:00Z","due_on":"2016-12-23T08:00:00Z","closed_at":"2016-12-24T00:40:56Z"},"comments":12,"created_at":"2016-11-03T02:49:47Z","updated_at":"2019-08-31T23:39:09Z","closed_at":"2016-11-12T12:26:46Z","author_association":"NONE","pull_request":{"url":"https://api.github.com/repos/go-gitea/gitea/pulls/20","html_url":"https://github.com/go-gitea/gitea/pull/20","diff_url":"https://github.com/go-gitea/gitea/pull/20.diff","patch_url":"https://github.com/go-gitea/gitea/pull/20.patch"},"body":"This fixes #3700. Apparently nothing in the public/ directory is actually filtered out from possible usernames, which means we can have try.gogs.io/css as a possible username. This could be quite dangerous in terms of XSS or some other exploit.\r\n\r\nAlso @Unknwon, how did you derp so hard in variable naming? reversed? really?"},"comment":{"url":"https://api.github.com/repos/go-gitea/gitea/issues/comments/526873221","html_url":"https://github.com/go-gitea/gitea/pull/20#issuecomment-526873221","issue_url":"https://api.github.com/repos/go-gitea/gitea/issues/20","id":526873221,"node_id":"MDEyOklzc3VlQ29tbWVudDUyNjg3MzIyMQ==","user":{"login":"camlafit","id":209915,"node_id":"MDQ6VXNlcjIwOTkxNQ==","avatar_url":"https://avatars3.githubusercontent.com/u/209915?v=4","gravatar_id":"","url":"https://api.github.com/users/camlafit","html_url":"https://github.com/camlafit","followers_url":"https://api.github.com/users/camlafit/followers","following_url":"https://api.github.com/users/camlafit/following{/other_user}","gists_url":"https://api.github.com/users/camlafit/gists{/gist_id}","starred_url":"https://api.github.com/users/camlafit/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/camlafit/subscriptions","organizations_url":"https://api.github.com/users/camlafit/orgs","repos_url":"https://api.github.com/users/camlafit/repos","events_url":"https://api.github.com/users/camlafit/events{/privacy}","received_events_url":"https://api.github.com/users/camlafit/received_events","type":"User","site_admin":false},"created_at":"2019-08-31T23:39:09Z","updated_at":"2019-08-31T23:39:09Z","author_association":"CONTRIBUTOR","body":"Hello\r\n\r\nI've encountered a problem with this patch. With last version 1.9.2, I've tried to rename an organization to \"plugins\" as it's its final purpose. I've got a simple error 500. \r\n\r\nI've check to on gitea.log to see a notice about reserved word without any information. And many thank to our chat as I've got a link to this PR (easier to understand my 500 error :)\r\n\r\nI see at least two problems : \r\n* First we can't provide an error 500 when organization is renamed with one of these reserved words. It's only an action forbidden. At least miss an information about this list of reserved words.\r\n* Second problem, in my use case \"plugins\" is really licit, this organization has to purpose to manage a plugins collection. \r\nI've do a workaround with \"plugin\" but If I've understood the initial problem this word should be prohibited. And looks difficult to maintain a harcoded list because we must manage any variant word and could be add many conflict with licit organization purpose.\r\n\r\nThank a lot"}}
{"actor":{"display_login":"camlafit"}}