{"action":"created","issue":{"url":"https://api.github.com/repos/zurb/foundation-sites/issues/7434","labels_url":"https://api.github.com/repos/zurb/foundation-sites/issues/7434/labels{/name}","comments_url":"https://api.github.com/repos/zurb/foundation-sites/issues/7434/comments","events_url":"https://api.github.com/repos/zurb/foundation-sites/issues/7434/events","html_url":"https://github.com/zurb/foundation-sites/issues/7434","id":120828929,"number":7434,"title":"SECURITY QUESTION","user":{"login":"blynnc","id":14908417,"avatar_url":"https://avatars.githubusercontent.com/u/14908417?v=3","gravatar_id":"","url":"https://api.github.com/users/blynnc","html_url":"https://github.com/blynnc","followers_url":"https://api.github.com/users/blynnc/followers","following_url":"https://api.github.com/users/blynnc/following{/other_user}","gists_url":"https://api.github.com/users/blynnc/gists{/gist_id}","starred_url":"https://api.github.com/users/blynnc/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/blynnc/subscriptions","organizations_url":"https://api.github.com/users/blynnc/orgs","repos_url":"https://api.github.com/users/blynnc/repos","events_url":"https://api.github.com/users/blynnc/events{/privacy}","received_events_url":"https://api.github.com/users/blynnc/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/zurb/foundation-sites/labels/question","name":"question","color":"eeeeee"}],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":5,"created_at":"2015-12-07T17:42:35Z","updated_at":"2015-12-17T18:12:14Z","closed_at":null,"body":"Wondering about security.  Code  --  Javascript, etc been checked for security?\r\n"},"comment":{"url":"https://api.github.com/repos/zurb/foundation-sites/issues/comments/165535371","html_url":"https://github.com/zurb/foundation-sites/issues/7434#issuecomment-165535371","issue_url":"https://api.github.com/repos/zurb/foundation-sites/issues/7434","id":165535371,"user":{"login":"andycochran","id":409279,"avatar_url":"https://avatars.githubusercontent.com/u/409279?v=3","gravatar_id":"","url":"https://api.github.com/users/andycochran","html_url":"https://github.com/andycochran","followers_url":"https://api.github.com/users/andycochran/followers","following_url":"https://api.github.com/users/andycochran/following{/other_user}","gists_url":"https://api.github.com/users/andycochran/gists{/gist_id}","starred_url":"https://api.github.com/users/andycochran/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/andycochran/subscriptions","organizations_url":"https://api.github.com/users/andycochran/orgs","repos_url":"https://api.github.com/users/andycochran/repos","events_url":"https://api.github.com/users/andycochran/events{/privacy}","received_events_url":"https://api.github.com/users/andycochran/received_events","type":"User","site_admin":false},"created_at":"2015-12-17T18:12:14Z","updated_at":"2015-12-17T18:12:14Z","body":"Joomla is a CMS; it talks to your server. Foundation doesn't; it's client-side only. Cross-site scripting is only an issue if your app doesn't properly separate data and executable code before it's sent to the user. That's a app-specific thing, not Foundation. If you're worried you've built an app that's susceptible to attacks, add a [JavaScript obfuscator](https://www.npmjs.com/package/gulp-obfuscate) to your build process. "}}