{"action":"created","issue":{"url":"https://api.github.com/repos/avocado-framework/avocado-server/issues/25","labels_url":"https://api.github.com/repos/avocado-framework/avocado-server/issues/25/labels{/name}","comments_url":"https://api.github.com/repos/avocado-framework/avocado-server/issues/25/comments","events_url":"https://api.github.com/repos/avocado-framework/avocado-server/issues/25/events","html_url":"https://github.com/avocado-framework/avocado-server/pull/25","id":82052478,"number":25,"title":"CORS support: add middleware that adds CORS headers to every response","user":{"login":"clebergnu","id":447178,"avatar_url":"https://avatars.githubusercontent.com/u/447178?v=3","gravatar_id":"","url":"https://api.github.com/users/clebergnu","html_url":"https://github.com/clebergnu","followers_url":"https://api.github.com/users/clebergnu/followers","following_url":"https://api.github.com/users/clebergnu/following{/other_user}","gists_url":"https://api.github.com/users/clebergnu/gists{/gist_id}","starred_url":"https://api.github.com/users/clebergnu/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/clebergnu/subscriptions","organizations_url":"https://api.github.com/users/clebergnu/orgs","repos_url":"https://api.github.com/users/clebergnu/repos","events_url":"https://api.github.com/users/clebergnu/events{/privacy}","received_events_url":"https://api.github.com/users/clebergnu/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":{"login":"ruda","id":171907,"avatar_url":"https://avatars.githubusercontent.com/u/171907?v=3","gravatar_id":"","url":"https://api.github.com/users/ruda","html_url":"https://github.com/ruda","followers_url":"https://api.github.com/users/ruda/followers","following_url":"https://api.github.com/users/ruda/following{/other_user}","gists_url":"https://api.github.com/users/ruda/gists{/gist_id}","starred_url":"https://api.github.com/users/ruda/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/ruda/subscriptions","organizations_url":"https://api.github.com/users/ruda/orgs","repos_url":"https://api.github.com/users/ruda/repos","events_url":"https://api.github.com/users/ruda/events{/privacy}","received_events_url":"https://api.github.com/users/ruda/received_events","type":"User","site_admin":false},"milestone":null,"comments":4,"created_at":"2015-05-28T17:53:31Z","updated_at":"2015-05-28T18:38:40Z","closed_at":null,"pull_request":{"url":"https://api.github.com/repos/avocado-framework/avocado-server/pulls/25","html_url":"https://github.com/avocado-framework/avocado-server/pull/25","diff_url":"https://github.com/avocado-framework/avocado-server/pull/25.diff","patch_url":"https://github.com/avocado-framework/avocado-server/pull/25.patch"},"body":"avocado-server is meant to be accessed by a number of clients, including\r\nHTML+JS clients making AJAX requests. For obivous reasons, if the server\r\ndoesn't hint with the appropriate headers, the user agent (browser) will\r\nrefuse to process the response.\r\n\r\nThis is intentionally a very simple implementation, that gives the most\r\npermissive access control setting in every single request. If we find\r\nout that we need finer grained control, then we can implement that later.\r\n\r\nSigned-off-by: Cleber Rosa <crosa@redhat.com>"},"comment":{"url":"https://api.github.com/repos/avocado-framework/avocado-server/issues/comments/106560445","html_url":"https://github.com/avocado-framework/avocado-server/pull/25#issuecomment-106560445","issue_url":"https://api.github.com/repos/avocado-framework/avocado-server/issues/25","id":106560445,"user":{"login":"clebergnu","id":447178,"avatar_url":"https://avatars.githubusercontent.com/u/447178?v=3","gravatar_id":"","url":"https://api.github.com/users/clebergnu","html_url":"https://github.com/clebergnu","followers_url":"https://api.github.com/users/clebergnu/followers","following_url":"https://api.github.com/users/clebergnu/following{/other_user}","gists_url":"https://api.github.com/users/clebergnu/gists{/gist_id}","starred_url":"https://api.github.com/users/clebergnu/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/clebergnu/subscriptions","organizations_url":"https://api.github.com/users/clebergnu/orgs","repos_url":"https://api.github.com/users/clebergnu/repos","events_url":"https://api.github.com/users/clebergnu/events{/privacy}","received_events_url":"https://api.github.com/users/clebergnu/received_events","type":"User","site_admin":false},"created_at":"2015-05-28T18:38:40Z","updated_at":"2015-05-28T18:38:40Z","body":"Well, we already had pretty relaxed access controls to non-browser user agents. This simply levels things among browsers and non-browsers user agents.\r\n\r\nIn the future we may, besides authentication, also add other forms of control access rules, rate limiting mechanisms for requests to prevent DoS and whatnot."}}