{"action":"created","issue":{"url":"https://api.github.com/repos/jenkinsci/multiple-scms-plugin/issues/2","labels_url":"https://api.github.com/repos/jenkinsci/multiple-scms-plugin/issues/2/labels{/name}","comments_url":"https://api.github.com/repos/jenkinsci/multiple-scms-plugin/issues/2/comments","events_url":"https://api.github.com/repos/jenkinsci/multiple-scms-plugin/issues/2/events","html_url":"https://github.com/jenkinsci/multiple-scms-plugin/pull/2","id":5977789,"number":2,"title":"Fix potential SAX parser error","user":{"login":"jhansche","id":99272,"avatar_url":"https://avatars.githubusercontent.com/u/99272?v=3","gravatar_id":"","url":"https://api.github.com/users/jhansche","html_url":"https://github.com/jhansche","followers_url":"https://api.github.com/users/jhansche/followers","following_url":"https://api.github.com/users/jhansche/following{/other_user}","gists_url":"https://api.github.com/users/jhansche/gists{/gist_id}","starred_url":"https://api.github.com/users/jhansche/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/jhansche/subscriptions","organizations_url":"https://api.github.com/users/jhansche/orgs","repos_url":"https://api.github.com/users/jhansche/repos","events_url":"https://api.github.com/users/jhansche/events{/privacy}","received_events_url":"https://api.github.com/users/jhansche/received_events","type":"User","site_admin":false},"labels":[],"state":"closed","locked":false,"assignee":null,"milestone":null,"comments":9,"created_at":"2012-08-01T20:36:01Z","updated_at":"2015-03-10T02:37:39Z","closed_at":"2015-03-10T02:37:39Z","pull_request":{"url":"https://api.github.com/repos/jenkinsci/multiple-scms-plugin/pulls/2","html_url":"https://github.com/jenkinsci/multiple-scms-plugin/pull/2","diff_url":"https://github.com/jenkinsci/multiple-scms-plugin/pull/2.diff","patch_url":"https://github.com/jenkinsci/multiple-scms-plugin/pull/2.patch"},"body":"Fixes https://issues.jenkins-ci.org/browse/JENKINS-14537\n\nThe plugin makes use of string concatenation in order to build the XML file (using `<%s scm=\\\"%s\\\">\\n<![CDATA[%s]]>\\n</%s>\\n` as a pattern to fill in plain Strings).  But then the plugin makes use of a SAX parser to parse the results.  Because the original XML file was not created using a proper XML generator, the result cannot be assumed to be properly formatted XML.\n\nThe simple test is to have a commit that simply includes the string \"`]]>`\".  The result will be that there are no new commits listed in the change log, and a *huge* stack trace dumped to the Jenkins log file.\n\nIn order to maintain backward compatibility (e.g., so it doesn't inadvertently decode entities from previous version of the plugin), it will only attempt the conversion if the `<multiple-scm-log>` node contains the `version=\"2\"` attribute."},"comment":{"url":"https://api.github.com/repos/jenkinsci/multiple-scms-plugin/issues/comments/77985848","html_url":"https://github.com/jenkinsci/multiple-scms-plugin/pull/2#issuecomment-77985848","issue_url":"https://api.github.com/repos/jenkinsci/multiple-scms-plugin/issues/2","id":77985848,"user":{"login":"rodrigc","id":1895943,"avatar_url":"https://avatars.githubusercontent.com/u/1895943?v=3","gravatar_id":"","url":"https://api.github.com/users/rodrigc","html_url":"https://github.com/rodrigc","followers_url":"https://api.github.com/users/rodrigc/followers","following_url":"https://api.github.com/users/rodrigc/following{/other_user}","gists_url":"https://api.github.com/users/rodrigc/gists{/gist_id}","starred_url":"https://api.github.com/users/rodrigc/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/rodrigc/subscriptions","organizations_url":"https://api.github.com/users/rodrigc/orgs","repos_url":"https://api.github.com/users/rodrigc/repos","events_url":"https://api.github.com/users/rodrigc/events{/privacy}","received_events_url":"https://api.github.com/users/rodrigc/received_events","type":"User","site_admin":false},"created_at":"2015-03-10T02:37:39Z","updated_at":"2015-03-10T02:37:39Z","body":"Closing pull request at request of @jgarcows "}}