{"action":"created","issue":{"url":"https://api.github.com/repos/GMOD/jbrowse/issues/570","labels_url":"https://api.github.com/repos/GMOD/jbrowse/issues/570/labels{/name}","comments_url":"https://api.github.com/repos/GMOD/jbrowse/issues/570/comments","events_url":"https://api.github.com/repos/GMOD/jbrowse/issues/570/events","html_url":"https://github.com/GMOD/jbrowse/pull/570","id":62829172,"number":570,"title":"Batch versions of addFeatures, addTracks and addStores","user":{"login":"sauloal","id":506579,"avatar_url":"https://avatars.githubusercontent.com/u/506579?v=3","gravatar_id":"","url":"https://api.github.com/users/sauloal","html_url":"https://github.com/sauloal","followers_url":"https://api.github.com/users/sauloal/followers","following_url":"https://api.github.com/users/sauloal/following{/other_user}","gists_url":"https://api.github.com/users/sauloal/gists{/gist_id}","starred_url":"https://api.github.com/users/sauloal/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/sauloal/subscriptions","organizations_url":"https://api.github.com/users/sauloal/orgs","repos_url":"https://api.github.com/users/sauloal/repos","events_url":"https://api.github.com/users/sauloal/events{/privacy}","received_events_url":"https://api.github.com/users/sauloal/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":3,"created_at":"2015-03-18T23:46:49Z","updated_at":"2015-03-24T19:03:24Z","closed_at":null,"pull_request":{"url":"https://api.github.com/repos/GMOD/jbrowse/pulls/570","html_url":"https://github.com/GMOD/jbrowse/pull/570","diff_url":"https://github.com/GMOD/jbrowse/pull/570.diff","patch_url":"https://github.com/GMOD/jbrowse/pull/570.patch"},"body":"This pull request adds the batch options for addFeatures, addTracks and addStores allowing for 3 JSON files to be passed in the URI.\r\n\r\naddFeaturesBatch=test_features.json&addTracksBatch=test_tracks.json&addStoresBatch=test_stores.json\r\n\r\nThis circumvents the 4000 characters limit for URIs.\r\n\r\n==> test_features.json <==\r\n[\r\n    \"t_label\"\r\n]\r\n\r\n==> test_stores.json <==\r\n{\r\n    \"s_name\": {\r\n        \"type\":\"JBrowse/Store/SeqFeature/GFF3\",\r\n        \"urlTemplate\":\"http://url.gff3\"\r\n    }\r\n}\r\n\r\n==> test_tracks.json <==\r\n[\r\n    {\r\n        \"label\": \"t_label\",\r\n        \"store\": \"s_name\",\r\n        \"type\" : \"JBrowse/View/Track/CanvasFeatures\",\r\n        \"style\": {\r\n            \"color\": \"red\"\r\n        }\r\n    }\r\n]\r\n"},"comment":{"url":"https://api.github.com/repos/GMOD/jbrowse/issues/comments/85645530","html_url":"https://github.com/GMOD/jbrowse/pull/570#issuecomment-85645530","issue_url":"https://api.github.com/repos/GMOD/jbrowse/issues/570","id":85645530,"user":{"login":"cmdcolin","id":6511937,"avatar_url":"https://avatars.githubusercontent.com/u/6511937?v=3","gravatar_id":"","url":"https://api.github.com/users/cmdcolin","html_url":"https://github.com/cmdcolin","followers_url":"https://api.github.com/users/cmdcolin/followers","following_url":"https://api.github.com/users/cmdcolin/following{/other_user}","gists_url":"https://api.github.com/users/cmdcolin/gists{/gist_id}","starred_url":"https://api.github.com/users/cmdcolin/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/cmdcolin/subscriptions","organizations_url":"https://api.github.com/users/cmdcolin/orgs","repos_url":"https://api.github.com/users/cmdcolin/repos","events_url":"https://api.github.com/users/cmdcolin/events{/privacy}","received_events_url":"https://api.github.com/users/cmdcolin/received_events","type":"User","site_admin":false},"created_at":"2015-03-24T19:03:24Z","updated_at":"2015-03-24T19:03:24Z","body":">Basically, if there's any insecurity, it remains the same except for the 4k URI limit.\r\n\r\nI think since you are calling load() instead of simply using JSON.parse like the existing APIs do, then it could potentially allow arbitrary callbacks in those JSON files to be executed (the config file loading allows callbacks and stuff)\r\n"}}