{"action":"created","issue":{"url":"https://api.github.com/repos/duckduckgo/zeroclickinfo-goodies/issues/1674","labels_url":"https://api.github.com/repos/duckduckgo/zeroclickinfo-goodies/issues/1674/labels{/name}","comments_url":"https://api.github.com/repos/duckduckgo/zeroclickinfo-goodies/issues/1674/comments","events_url":"https://api.github.com/repos/duckduckgo/zeroclickinfo-goodies/issues/1674/events","html_url":"https://github.com/duckduckgo/zeroclickinfo-goodies/pull/1674","id":112431217,"number":1674,"title":"Figlet Hotfix","user":{"login":"moollaza","id":873785,"avatar_url":"https://avatars.githubusercontent.com/u/873785?v=3","gravatar_id":"","url":"https://api.github.com/users/moollaza","html_url":"https://github.com/moollaza","followers_url":"https://api.github.com/users/moollaza/followers","following_url":"https://api.github.com/users/moollaza/following{/other_user}","gists_url":"https://api.github.com/users/moollaza/gists{/gist_id}","starred_url":"https://api.github.com/users/moollaza/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/moollaza/subscriptions","organizations_url":"https://api.github.com/users/moollaza/orgs","repos_url":"https://api.github.com/users/moollaza/repos","events_url":"https://api.github.com/users/moollaza/events{/privacy}","received_events_url":"https://api.github.com/users/moollaza/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/duckduckgo/zeroclickinfo-goodies/labels/Improvement","name":"Improvement","color":"d7e102"},{"url":"https://api.github.com/repos/duckduckgo/zeroclickinfo-goodies/labels/Priority:%20High","name":"Priority: High","color":"eb6420"}],"state":"open","locked":false,"assignee":{"login":"jagtalon","id":81969,"avatar_url":"https://avatars.githubusercontent.com/u/81969?v=3","gravatar_id":"","url":"https://api.github.com/users/jagtalon","html_url":"https://github.com/jagtalon","followers_url":"https://api.github.com/users/jagtalon/followers","following_url":"https://api.github.com/users/jagtalon/following{/other_user}","gists_url":"https://api.github.com/users/jagtalon/gists{/gist_id}","starred_url":"https://api.github.com/users/jagtalon/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/jagtalon/subscriptions","organizations_url":"https://api.github.com/users/jagtalon/orgs","repos_url":"https://api.github.com/users/jagtalon/repos","events_url":"https://api.github.com/users/jagtalon/events{/privacy}","received_events_url":"https://api.github.com/users/jagtalon/received_events","type":"User","site_admin":false},"milestone":null,"comments":2,"created_at":"2015-10-20T18:33:08Z","updated_at":"2015-10-20T18:40:58Z","closed_at":null,"pull_request":{"url":"https://api.github.com/repos/duckduckgo/zeroclickinfo-goodies/pulls/1674","html_url":"https://github.com/duckduckgo/zeroclickinfo-goodies/pull/1674","diff_url":"https://github.com/duckduckgo/zeroclickinfo-goodies/pull/1674.diff","patch_url":"https://github.com/duckduckgo/zeroclickinfo-goodies/pull/1674.patch"},"body":"Hotfix for Figlet to plug XSS hole.\r\n\r\nNow html encodes text when using one of the 3 plaintext fonts. I decided to only do this for these three fonts so that the output will still look correct in the \"bigtext\" fonts, like the default Figlet font.\r\n\r\nExamples:\r\n\r\nEncoded Plaintext\r\n<img width=\"1447\" alt=\"figlet_term__img_src___favicon_ico__onload__alert_1____at_duckduckgo_and_file_finder\" src=\"https://cloud.githubusercontent.com/assets/873785/10617237/57cdf5fe-7737-11e5-83ae-ec3fc4393e3f.png\">\r\n\r\nUn-Encoded Non-plaintext\r\n<img width=\"1439\" alt=\"figlet__img_src___favicon_ico__onload__alert_1____at_duckduckgo_and_file_finder\" src=\"https://cloud.githubusercontent.com/assets/873785/10617243/5dd7801e-7737-11e5-8423-ca65ee04bef6.png\">\r\n\r\n/cc @nilnilnil "},"comment":{"url":"https://api.github.com/repos/duckduckgo/zeroclickinfo-goodies/issues/comments/149660741","html_url":"https://github.com/duckduckgo/zeroclickinfo-goodies/pull/1674#issuecomment-149660741","issue_url":"https://api.github.com/repos/duckduckgo/zeroclickinfo-goodies/issues/1674","id":149660741,"user":{"login":"moollaza","id":873785,"avatar_url":"https://avatars.githubusercontent.com/u/873785?v=3","gravatar_id":"","url":"https://api.github.com/users/moollaza","html_url":"https://github.com/moollaza","followers_url":"https://api.github.com/users/moollaza/followers","following_url":"https://api.github.com/users/moollaza/following{/other_user}","gists_url":"https://api.github.com/users/moollaza/gists{/gist_id}","starred_url":"https://api.github.com/users/moollaza/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/moollaza/subscriptions","organizations_url":"https://api.github.com/users/moollaza/orgs","repos_url":"https://api.github.com/users/moollaza/repos","events_url":"https://api.github.com/users/moollaza/events{/privacy}","received_events_url":"https://api.github.com/users/moollaza/received_events","type":"User","site_admin":false},"created_at":"2015-10-20T18:40:58Z","updated_at":"2015-10-20T18:40:58Z","body":"This one obviously needs to be converted to use templates, but this is a quicker fix."}}