{"action":"created","issue":{"url":"https://api.github.com/repos/Zarel/Pokemon-Showdown/issues/1505","labels_url":"https://api.github.com/repos/Zarel/Pokemon-Showdown/issues/1505/labels{/name}","comments_url":"https://api.github.com/repos/Zarel/Pokemon-Showdown/issues/1505/comments","events_url":"https://api.github.com/repos/Zarel/Pokemon-Showdown/issues/1505/events","html_url":"https://github.com/Zarel/Pokemon-Showdown/pull/1505","id":56365621,"number":1505,"title":"Prevent arbitrary JS in Pokemon names","user":{"login":"Morfent","id":6477435,"avatar_url":"https://avatars.githubusercontent.com/u/6477435?v=3","gravatar_id":"","url":"https://api.github.com/users/Morfent","html_url":"https://github.com/Morfent","followers_url":"https://api.github.com/users/Morfent/followers","following_url":"https://api.github.com/users/Morfent/following{/other_user}","gists_url":"https://api.github.com/users/Morfent/gists{/gist_id}","starred_url":"https://api.github.com/users/Morfent/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/Morfent/subscriptions","organizations_url":"https://api.github.com/users/Morfent/orgs","repos_url":"https://api.github.com/users/Morfent/repos","events_url":"https://api.github.com/users/Morfent/events{/privacy}","received_events_url":"https://api.github.com/users/Morfent/received_events","type":"User","site_admin":false},"labels":[],"state":"closed","locked":false,"assignee":null,"milestone":null,"comments":2,"created_at":"2015-02-03T11:28:20Z","updated_at":"2015-02-03T13:30:50Z","closed_at":"2015-02-03T11:39:58Z","pull_request":{"url":"https://api.github.com/repos/Zarel/Pokemon-Showdown/pulls/1505","html_url":"https://github.com/Zarel/Pokemon-Showdown/pull/1505","diff_url":"https://github.com/Zarel/Pokemon-Showdown/pull/1505.diff","patch_url":"https://github.com/Zarel/Pokemon-Showdown/pull/1505.patch"},"body":"Currently, arbitrary javascript can be injected into battles theough\r\n/eval and /evalbattle in the Pokemon name. The >s in their names will\r\nstill display, but they will no longer have the battle run their\r\ninjected code."},"comment":{"url":"https://api.github.com/repos/Zarel/Pokemon-Showdown/issues/comments/72650087","html_url":"https://github.com/Zarel/Pokemon-Showdown/pull/1505#issuecomment-72650087","issue_url":"https://api.github.com/repos/Zarel/Pokemon-Showdown/issues/1505","id":72650087,"user":{"login":"kotarou3","id":1522164,"avatar_url":"https://avatars.githubusercontent.com/u/1522164?v=3","gravatar_id":"","url":"https://api.github.com/users/kotarou3","html_url":"https://github.com/kotarou3","followers_url":"https://api.github.com/users/kotarou3/followers","following_url":"https://api.github.com/users/kotarou3/following{/other_user}","gists_url":"https://api.github.com/users/kotarou3/gists{/gist_id}","starred_url":"https://api.github.com/users/kotarou3/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/kotarou3/subscriptions","organizations_url":"https://api.github.com/users/kotarou3/orgs","repos_url":"https://api.github.com/users/kotarou3/repos","events_url":"https://api.github.com/users/kotarou3/events{/privacy}","received_events_url":"https://api.github.com/users/kotarou3/received_events","type":"User","site_admin":false},"created_at":"2015-02-03T13:30:50Z","updated_at":"2015-02-03T13:30:50Z","body":"No, it definitely should be done server-sided (unless I'm interpreting this issue wrong?)"}}