{"action":"created","issue":{"url":"https://api.github.com/repos/gregjacobs/Autolinker.js/issues/87","labels_url":"https://api.github.com/repos/gregjacobs/Autolinker.js/issues/87/labels{/name}","comments_url":"https://api.github.com/repos/gregjacobs/Autolinker.js/issues/87/comments","events_url":"https://api.github.com/repos/gregjacobs/Autolinker.js/issues/87/events","html_url":"https://github.com/gregjacobs/Autolinker.js/pull/87","id":58014838,"number":87,"title":"Security: Use case-insensitive matching for forbidden protocols","user":{"login":"JordanMilne","id":278982,"avatar_url":"https://avatars.githubusercontent.com/u/278982?v=3","gravatar_id":"","url":"https://api.github.com/users/JordanMilne","html_url":"https://github.com/JordanMilne","followers_url":"https://api.github.com/users/JordanMilne/followers","following_url":"https://api.github.com/users/JordanMilne/following{/other_user}","gists_url":"https://api.github.com/users/JordanMilne/gists{/gist_id}","starred_url":"https://api.github.com/users/JordanMilne/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/JordanMilne/subscriptions","organizations_url":"https://api.github.com/users/JordanMilne/orgs","repos_url":"https://api.github.com/users/JordanMilne/repos","events_url":"https://api.github.com/users/JordanMilne/events{/privacy}","received_events_url":"https://api.github.com/users/JordanMilne/received_events","type":"User","site_admin":false},"labels":[],"state":"closed","locked":false,"assignee":null,"milestone":null,"comments":1,"created_at":"2015-02-18T02:05:28Z","updated_at":"2015-03-29T21:44:59Z","closed_at":"2015-03-29T21:44:15Z","pull_request":{"url":"https://api.github.com/repos/gregjacobs/Autolinker.js/pulls/87","html_url":"https://github.com/gregjacobs/Autolinker.js/pull/87","diff_url":"https://github.com/gregjacobs/Autolinker.js/pull/87.diff","patch_url":"https://github.com/gregjacobs/Autolinker.js/pull/87.patch"},"body":"Protocols are case-insensitive in browsers, so our check needs to be as well. Not posting a weaponized payload, but I've confirmed it's exploitable."},"comment":{"url":"https://api.github.com/repos/gregjacobs/Autolinker.js/issues/comments/87485581","html_url":"https://github.com/gregjacobs/Autolinker.js/pull/87#issuecomment-87485581","issue_url":"https://api.github.com/repos/gregjacobs/Autolinker.js/issues/87","id":87485581,"user":{"login":"gregjacobs","id":302273,"avatar_url":"https://avatars.githubusercontent.com/u/302273?v=3","gravatar_id":"","url":"https://api.github.com/users/gregjacobs","html_url":"https://github.com/gregjacobs","followers_url":"https://api.github.com/users/gregjacobs/followers","following_url":"https://api.github.com/users/gregjacobs/following{/other_user}","gists_url":"https://api.github.com/users/gregjacobs/gists{/gist_id}","starred_url":"https://api.github.com/users/gregjacobs/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/gregjacobs/subscriptions","organizations_url":"https://api.github.com/users/gregjacobs/orgs","repos_url":"https://api.github.com/users/gregjacobs/repos","events_url":"https://api.github.com/users/gregjacobs/events{/privacy}","received_events_url":"https://api.github.com/users/gregjacobs/received_events","type":"User","site_admin":false},"created_at":"2015-03-29T21:44:59Z","updated_at":"2015-03-29T21:44:59Z","body":"Thanks so much Jordan. So sorry for the super delayed merge!"}}