{"comment":{"url":"https://api.github.com/repos/mikewest/webappsec/comments/10571836","html_url":"https://github.com/mikewest/webappsec/commit/556a0b5a478dbc952a082d7111e3c8a4f5aa4ea7#commitcomment-10571836","id":10571836,"user":{"login":"randomdross","id":1694025,"avatar_url":"https://avatars.githubusercontent.com/u/1694025?v=3","gravatar_id":"","url":"https://api.github.com/users/randomdross","html_url":"https://github.com/randomdross","followers_url":"https://api.github.com/users/randomdross/followers","following_url":"https://api.github.com/users/randomdross/following{/other_user}","gists_url":"https://api.github.com/users/randomdross/gists{/gist_id}","starred_url":"https://api.github.com/users/randomdross/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/randomdross/subscriptions","organizations_url":"https://api.github.com/users/randomdross/orgs","repos_url":"https://api.github.com/users/randomdross/repos","events_url":"https://api.github.com/users/randomdross/events{/privacy}","received_events_url":"https://api.github.com/users/randomdross/received_events","type":"User","site_admin":false},"position":169,"line":428,"path":"specs/epr/index.src.html","commit_id":"556a0b5a478dbc952a082d7111e3c8a4f5aa4ea7","created_at":"2015-04-04T06:31:23Z","updated_at":"2015-04-04T06:31:23Z","body":"Yeah I think we do need a higher level container.  A site could reasonably serve an empty ruleset and it would be very much expected in that case for EPR to operate as advertised, as opposed to \"fail open.\""}}