{"action":"created","issue":{"url":"https://api.github.com/repos/gogits/gogs/issues/1140","labels_url":"https://api.github.com/repos/gogits/gogs/issues/1140/labels{/name}","comments_url":"https://api.github.com/repos/gogits/gogs/issues/1140/comments","events_url":"https://api.github.com/repos/gogits/gogs/issues/1140/events","html_url":"https://github.com/gogits/gogs/issues/1140","id":64002989,"number":1140,"title":"MySQL root password exposure","user":{"login":"tsumaru720","id":239857,"avatar_url":"https://avatars.githubusercontent.com/u/239857?v=3","gravatar_id":"","url":"https://api.github.com/users/tsumaru720","html_url":"https://github.com/tsumaru720","followers_url":"https://api.github.com/users/tsumaru720/followers","following_url":"https://api.github.com/users/tsumaru720/following{/other_user}","gists_url":"https://api.github.com/users/tsumaru720/gists{/gist_id}","starred_url":"https://api.github.com/users/tsumaru720/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/tsumaru720/subscriptions","organizations_url":"https://api.github.com/users/tsumaru720/orgs","repos_url":"https://api.github.com/users/tsumaru720/repos","events_url":"https://api.github.com/users/tsumaru720/events{/privacy}","received_events_url":"https://api.github.com/users/tsumaru720/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/gogits/gogs/labels/bug","name":"bug","color":"fc2929"}],"state":"open","locked":false,"assignee":null,"milestone":{"url":"https://api.github.com/repos/gogits/gogs/milestones/6","html_url":"https://github.com/gogits/gogs/milestones/0.6.1","labels_url":"https://api.github.com/repos/gogits/gogs/milestones/6/labels","id":1021828,"number":6,"title":"0.6.1","description":"","creator":{"login":"Unknwon","id":2946214,"avatar_url":"https://avatars.githubusercontent.com/u/2946214?v=3","gravatar_id":"","url":"https://api.github.com/users/Unknwon","html_url":"https://github.com/Unknwon","followers_url":"https://api.github.com/users/Unknwon/followers","following_url":"https://api.github.com/users/Unknwon/following{/other_user}","gists_url":"https://api.github.com/users/Unknwon/gists{/gist_id}","starred_url":"https://api.github.com/users/Unknwon/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/Unknwon/subscriptions","organizations_url":"https://api.github.com/users/Unknwon/orgs","repos_url":"https://api.github.com/users/Unknwon/repos","events_url":"https://api.github.com/users/Unknwon/events{/privacy}","received_events_url":"https://api.github.com/users/Unknwon/received_events","type":"User","site_admin":false},"open_issues":17,"closed_issues":8,"state":"open","created_at":"2015-03-15T02:43:24Z","updated_at":"2015-03-24T23:07:42Z","due_on":null,"closed_at":null},"comments":1,"created_at":"2015-03-24T14:06:14Z","updated_at":"2015-03-24T23:15:56Z","closed_at":null,"body":"Once Gogs is installed, if you re-enable the install page via INSTALL_LOCK=false, the MySQL root password is visible in the HTML source.\r\n\r\nAs Gogs clearly already knows about config values, maybe just fill out the SQL password with Asterisks or keep it empty with some text advising that it will change if updated.\r\n\r\nGogs Version: 0.6.0.0319 Beta"},"comment":{"url":"https://api.github.com/repos/gogits/gogs/issues/comments/85735751","html_url":"https://github.com/gogits/gogs/issues/1140#issuecomment-85735751","issue_url":"https://api.github.com/repos/gogits/gogs/issues/1140","id":85735751,"user":{"login":"Unknwon","id":2946214,"avatar_url":"https://avatars.githubusercontent.com/u/2946214?v=3","gravatar_id":"","url":"https://api.github.com/users/Unknwon","html_url":"https://github.com/Unknwon","followers_url":"https://api.github.com/users/Unknwon/followers","following_url":"https://api.github.com/users/Unknwon/following{/other_user}","gists_url":"https://api.github.com/users/Unknwon/gists{/gist_id}","starred_url":"https://api.github.com/users/Unknwon/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/Unknwon/subscriptions","organizations_url":"https://api.github.com/users/Unknwon/orgs","repos_url":"https://api.github.com/users/Unknwon/repos","events_url":"https://api.github.com/users/Unknwon/events{/privacy}","received_events_url":"https://api.github.com/users/Unknwon/received_events","type":"User","site_admin":false},"created_at":"2015-03-24T23:15:56Z","updated_at":"2015-03-24T23:15:56Z","body":"Hi @tsumaru720 , pushed fix on `master`."}}