{"action":"created","issue":{"url":"https://api.github.com/repos/ipython/ipython/issues/7983","labels_url":"https://api.github.com/repos/ipython/ipython/issues/7983/labels{/name}","comments_url":"https://api.github.com/repos/ipython/ipython/issues/7983/comments","events_url":"https://api.github.com/repos/ipython/ipython/issues/7983/events","html_url":"https://github.com/ipython/ipython/pull/7983","id":60045125,"number":7983,"title":"contents: double check that os_path is always within root","user":{"login":"minrk","id":151929,"avatar_url":"https://avatars.githubusercontent.com/u/151929?v=3","gravatar_id":"","url":"https://api.github.com/users/minrk","html_url":"https://github.com/minrk","followers_url":"https://api.github.com/users/minrk/followers","following_url":"https://api.github.com/users/minrk/following{/other_user}","gists_url":"https://api.github.com/users/minrk/gists{/gist_id}","starred_url":"https://api.github.com/users/minrk/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/minrk/subscriptions","organizations_url":"https://api.github.com/users/minrk/orgs","repos_url":"https://api.github.com/users/minrk/repos","events_url":"https://api.github.com/users/minrk/events{/privacy}","received_events_url":"https://api.github.com/users/minrk/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":1,"created_at":"2015-03-06T01:25:16Z","updated_at":"2015-03-06T01:32:38Z","closed_at":null,"pull_request":{"url":"https://api.github.com/repos/ipython/ipython/pulls/7983","html_url":"https://github.com/ipython/ipython/pull/7983","diff_url":"https://github.com/ipython/ipython/pull/7983.diff","patch_url":"https://github.com/ipython/ipython/pull/7983.patch"},"body":"check based on tornado `StaticFileHandler.validate_absolute_path`\n\nI haven't been able to actually escape root, but we should have this check anyway.\n\n/cc @jasongrout"},"comment":{"url":"https://api.github.com/repos/ipython/ipython/issues/comments/77490288","html_url":"https://github.com/ipython/ipython/pull/7983#issuecomment-77490288","issue_url":"https://api.github.com/repos/ipython/ipython/issues/7983","id":77490288,"user":{"login":"takluyver","id":327925,"avatar_url":"https://avatars.githubusercontent.com/u/327925?v=3","gravatar_id":"","url":"https://api.github.com/users/takluyver","html_url":"https://github.com/takluyver","followers_url":"https://api.github.com/users/takluyver/followers","following_url":"https://api.github.com/users/takluyver/following{/other_user}","gists_url":"https://api.github.com/users/takluyver/gists{/gist_id}","starred_url":"https://api.github.com/users/takluyver/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/takluyver/subscriptions","organizations_url":"https://api.github.com/users/takluyver/orgs","repos_url":"https://api.github.com/users/takluyver/repos","events_url":"https://api.github.com/users/takluyver/events{/privacy}","received_events_url":"https://api.github.com/users/takluyver/received_events","type":"User","site_admin":false},"created_at":"2015-03-06T01:32:38Z","updated_at":"2015-03-06T01:32:38Z","body":":+1: "}}