{"action":"created","issue":{"url":"https://api.github.com/repos/Pylons/waitress/issues/80","labels_url":"https://api.github.com/repos/Pylons/waitress/issues/80/labels{/name}","comments_url":"https://api.github.com/repos/Pylons/waitress/issues/80/comments","events_url":"https://api.github.com/repos/Pylons/waitress/issues/80/events","html_url":"https://github.com/Pylons/waitress/pull/80","id":54259671,"number":80,"title":"Prevent header spoofing via underscore/dash conflation.","user":{"login":"mgrbyte","id":3185091,"avatar_url":"https://avatars.githubusercontent.com/u/3185091?v=3","gravatar_id":"","url":"https://api.github.com/users/mgrbyte","html_url":"https://github.com/mgrbyte","followers_url":"https://api.github.com/users/mgrbyte/followers","following_url":"https://api.github.com/users/mgrbyte/following{/other_user}","gists_url":"https://api.github.com/users/mgrbyte/gists{/gist_id}","starred_url":"https://api.github.com/users/mgrbyte/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/mgrbyte/subscriptions","organizations_url":"https://api.github.com/users/mgrbyte/orgs","repos_url":"https://api.github.com/users/mgrbyte/repos","events_url":"https://api.github.com/users/mgrbyte/events{/privacy}","received_events_url":"https://api.github.com/users/mgrbyte/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":1,"created_at":"2015-01-13T22:46:42Z","updated_at":"2015-01-14T03:12:57Z","closed_at":null,"pull_request":{"url":"https://api.github.com/repos/Pylons/waitress/pulls/80","html_url":"https://github.com/Pylons/waitress/pull/80","diff_url":"https://github.com/Pylons/waitress/pull/80.diff","patch_url":"https://github.com/Pylons/waitress/pull/80.patch"},"body":"This PR prevents the WSGI header attack as documented here (by dropped headers containing underscores from the request) \r\nSee https://www.djangoproject.com/weblog/2015/jan/13/security/\r\n"},"comment":{"url":"https://api.github.com/repos/Pylons/waitress/issues/comments/69862895","html_url":"https://github.com/Pylons/waitress/pull/80#issuecomment-69862895","issue_url":"https://api.github.com/repos/Pylons/waitress/issues/80","id":69862895,"user":{"login":"tseaver","id":242750,"avatar_url":"https://avatars.githubusercontent.com/u/242750?v=3","gravatar_id":"","url":"https://api.github.com/users/tseaver","html_url":"https://github.com/tseaver","followers_url":"https://api.github.com/users/tseaver/followers","following_url":"https://api.github.com/users/tseaver/following{/other_user}","gists_url":"https://api.github.com/users/tseaver/gists{/gist_id}","starred_url":"https://api.github.com/users/tseaver/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/tseaver/subscriptions","organizations_url":"https://api.github.com/users/tseaver/orgs","repos_url":"https://api.github.com/users/tseaver/repos","events_url":"https://api.github.com/users/tseaver/events{/privacy}","received_events_url":"https://api.github.com/users/tseaver/received_events","type":"User","site_admin":false},"created_at":"2015-01-14T03:12:57Z","updated_at":"2015-01-14T03:12:57Z","body":"The test failures don't look to be related to the changes here:  more like timeouts (Travis under heavy load?)  I have restarted the test run there."}}