{"action":"created","issue":{"url":"https://api.github.com/repos/wet-boew/wet-boew/issues/7281","labels_url":"https://api.github.com/repos/wet-boew/wet-boew/issues/7281/labels{/name}","comments_url":"https://api.github.com/repos/wet-boew/wet-boew/issues/7281/comments","events_url":"https://api.github.com/repos/wet-boew/wet-boew/issues/7281/events","html_url":"https://github.com/wet-boew/wet-boew/issues/7281","id":121079699,"number":7281,"title":"Tabbed Interface: xss bug","user":{"login":"muling","id":2365028,"avatar_url":"https://avatars.githubusercontent.com/u/2365028?v=3","gravatar_id":"","url":"https://api.github.com/users/muling","html_url":"https://github.com/muling","followers_url":"https://api.github.com/users/muling/followers","following_url":"https://api.github.com/users/muling/following{/other_user}","gists_url":"https://api.github.com/users/muling/gists{/gist_id}","starred_url":"https://api.github.com/users/muling/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/muling/subscriptions","organizations_url":"https://api.github.com/users/muling/orgs","repos_url":"https://api.github.com/users/muling/repos","events_url":"https://api.github.com/users/muling/events{/privacy}","received_events_url":"https://api.github.com/users/muling/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":7,"created_at":"2015-12-08T19:23:45Z","updated_at":"2015-12-08T19:47:40Z","closed_at":null,"body":"http://wet-boew.github.io/wet-boew/demos/tabs/tabs-en.html?wvstest=javascript:domxssExecutionSink%281,%22%27\\%22%3E%3Cxsstag%3E%28%29locxss%22%29#javascript:domxssExecutionSink%281,%22%27\\%22%3E%3Cxsstag%3E%28%29locxss%22%29\r\n\r\nThis XSS vulnerability seems to break the tabbed plugin."},"comment":{"url":"https://api.github.com/repos/wet-boew/wet-boew/issues/comments/162994421","html_url":"https://github.com/wet-boew/wet-boew/issues/7281#issuecomment-162994421","issue_url":"https://api.github.com/repos/wet-boew/wet-boew/issues/7281","id":162994421,"user":{"login":"andre-gh","id":13316676,"avatar_url":"https://avatars.githubusercontent.com/u/13316676?v=3","gravatar_id":"","url":"https://api.github.com/users/andre-gh","html_url":"https://github.com/andre-gh","followers_url":"https://api.github.com/users/andre-gh/followers","following_url":"https://api.github.com/users/andre-gh/following{/other_user}","gists_url":"https://api.github.com/users/andre-gh/gists{/gist_id}","starred_url":"https://api.github.com/users/andre-gh/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/andre-gh/subscriptions","organizations_url":"https://api.github.com/users/andre-gh/orgs","repos_url":"https://api.github.com/users/andre-gh/repos","events_url":"https://api.github.com/users/andre-gh/events{/privacy}","received_events_url":"https://api.github.com/users/andre-gh/received_events","type":"User","site_admin":false},"created_at":"2015-12-08T19:47:40Z","updated_at":"2015-12-08T19:47:40Z","body":"Something is flawed with our jquery escaper, the tabs code in this case calls `jqescape` which is meant to allow jquery to search for an item with that ID without crashing, we can try replacing it with a different regex provided by the jquery docs"}}