{"action":"created","issue":{"url":"https://api.github.com/repos/skritter/skritter-html5/issues/355","labels_url":"https://api.github.com/repos/skritter/skritter-html5/issues/355/labels{/name}","comments_url":"https://api.github.com/repos/skritter/skritter-html5/issues/355/comments","events_url":"https://api.github.com/repos/skritter/skritter-html5/issues/355/events","html_url":"https://github.com/skritter/skritter-html5/issues/355","id":54760110,"number":355,"title":"failed authentication requests should not leave password in plaintext in the url","user":{"login":"Blakomen","id":10598107,"avatar_url":"https://avatars.githubusercontent.com/u/10598107?v=3","gravatar_id":"","url":"https://api.github.com/users/Blakomen","html_url":"https://github.com/Blakomen","followers_url":"https://api.github.com/users/Blakomen/followers","following_url":"https://api.github.com/users/Blakomen/following{/other_user}","gists_url":"https://api.github.com/users/Blakomen/gists{/gist_id}","starred_url":"https://api.github.com/users/Blakomen/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/Blakomen/subscriptions","organizations_url":"https://api.github.com/users/Blakomen/orgs","repos_url":"https://api.github.com/users/Blakomen/repos","events_url":"https://api.github.com/users/Blakomen/events{/privacy}","received_events_url":"https://api.github.com/users/Blakomen/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/skritter/skritter-html5/labels/bug","name":"bug","color":"fc2929"},{"url":"https://api.github.com/repos/skritter/skritter-html5/labels/iemobile","name":"iemobile","color":"006b75"}],"state":"open","locked":false,"assignee":{"login":"mcfarljw","id":4167341,"avatar_url":"https://avatars.githubusercontent.com/u/4167341?v=3","gravatar_id":"","url":"https://api.github.com/users/mcfarljw","html_url":"https://github.com/mcfarljw","followers_url":"https://api.github.com/users/mcfarljw/followers","following_url":"https://api.github.com/users/mcfarljw/following{/other_user}","gists_url":"https://api.github.com/users/mcfarljw/gists{/gist_id}","starred_url":"https://api.github.com/users/mcfarljw/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/mcfarljw/subscriptions","organizations_url":"https://api.github.com/users/mcfarljw/orgs","repos_url":"https://api.github.com/users/mcfarljw/repos","events_url":"https://api.github.com/users/mcfarljw/events{/privacy}","received_events_url":"https://api.github.com/users/mcfarljw/received_events","type":"User","site_admin":false},"milestone":null,"comments":5,"created_at":"2015-01-19T12:52:06Z","updated_at":"2015-01-19T18:52:44Z","closed_at":null,"body":"I'm sure I can't be the only person who doesn't appreciate seeing their password in plaintext in the url."},"comment":{"url":"https://api.github.com/repos/skritter/skritter-html5/issues/comments/70542191","html_url":"https://github.com/skritter/skritter-html5/issues/355#issuecomment-70542191","issue_url":"https://api.github.com/repos/skritter/skritter-html5/issues/355","id":70542191,"user":{"login":"mcfarljw","id":4167341,"avatar_url":"https://avatars.githubusercontent.com/u/4167341?v=3","gravatar_id":"","url":"https://api.github.com/users/mcfarljw","html_url":"https://github.com/mcfarljw","followers_url":"https://api.github.com/users/mcfarljw/followers","following_url":"https://api.github.com/users/mcfarljw/following{/other_user}","gists_url":"https://api.github.com/users/mcfarljw/gists{/gist_id}","starred_url":"https://api.github.com/users/mcfarljw/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/mcfarljw/subscriptions","organizations_url":"https://api.github.com/users/mcfarljw/orgs","repos_url":"https://api.github.com/users/mcfarljw/repos","events_url":"https://api.github.com/users/mcfarljw/events{/privacy}","received_events_url":"https://api.github.com/users/mcfarljw/received_events","type":"User","site_admin":false},"created_at":"2015-01-19T18:52:44Z","updated_at":"2015-01-19T18:52:44Z","body":"I tried using device emulation to reproduce the issue, but I wasn't able to. I might be doing something wrong, but have attached a screenshot of my results using dummy variables. Is this what you're seeing, but with them appended to the url?\r\n\r\nIf so can you double check the version of windows phone and iemobile? It very well may be a version specific issue, but if I see exactly how it's displayed on your device I should be able to add extra handling to make sure that stuff is stripped out of the url.\r\n\r\n![winphone-screenshot1](https://cloud.githubusercontent.com/assets/4167341/5805968/b369871a-9fd9-11e4-9339-dc6943bdf913.png)\r\n"}}