{"action":"created","issue":{"url":"https://api.github.com/repos/cross-solution/YAWIK/issues/82","labels_url":"https://api.github.com/repos/cross-solution/YAWIK/issues/82/labels{/name}","comments_url":"https://api.github.com/repos/cross-solution/YAWIK/issues/82/comments","events_url":"https://api.github.com/repos/cross-solution/YAWIK/issues/82/events","html_url":"https://github.com/cross-solution/YAWIK/issues/82","id":52640017,"number":82,"title":"filter JS from job openings","user":{"login":"cbleek","id":858642,"avatar_url":"https://avatars.githubusercontent.com/u/858642?v=3","gravatar_id":"","url":"https://api.github.com/users/cbleek","html_url":"https://github.com/cbleek","followers_url":"https://api.github.com/users/cbleek/followers","following_url":"https://api.github.com/users/cbleek/following{/other_user}","gists_url":"https://api.github.com/users/cbleek/gists{/gist_id}","starred_url":"https://api.github.com/users/cbleek/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/cbleek/subscriptions","organizations_url":"https://api.github.com/users/cbleek/orgs","repos_url":"https://api.github.com/users/cbleek/repos","events_url":"https://api.github.com/users/cbleek/events{/privacy}","received_events_url":"https://api.github.com/users/cbleek/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"milestone":{"url":"https://api.github.com/repos/cross-solution/YAWIK/milestones/13","labels_url":"https://api.github.com/repos/cross-solution/YAWIK/milestones/13/labels","id":819519,"number":13,"title":"v0.18","description":"","creator":{"login":"TiSiE","id":2029304,"avatar_url":"https://avatars.githubusercontent.com/u/2029304?v=3","gravatar_id":"","url":"https://api.github.com/users/TiSiE","html_url":"https://github.com/TiSiE","followers_url":"https://api.github.com/users/TiSiE/followers","following_url":"https://api.github.com/users/TiSiE/following{/other_user}","gists_url":"https://api.github.com/users/TiSiE/gists{/gist_id}","starred_url":"https://api.github.com/users/TiSiE/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/TiSiE/subscriptions","organizations_url":"https://api.github.com/users/TiSiE/orgs","repos_url":"https://api.github.com/users/TiSiE/repos","events_url":"https://api.github.com/users/TiSiE/events{/privacy}","received_events_url":"https://api.github.com/users/TiSiE/received_events","type":"User","site_admin":false},"open_issues":6,"closed_issues":1,"state":"open","created_at":"2014-10-09T08:55:07Z","updated_at":"2015-02-03T16:08:00Z","due_on":"2015-02-12T23:00:00Z","closed_at":null},"comments":2,"created_at":"2014-12-22T11:08:36Z","updated_at":"2015-02-09T15:20:42Z","closed_at":null,"body":"currently it's possible to put JS into the tinyMCE inline Editor\r\n\r\nhttp://www.karriere24.com/jobs/de/jobs/view?id=5494bb61d464a3de42dedae8\r\n\r\nJS has to be filtered.\r\n\r\n"},"comment":{"url":"https://api.github.com/repos/cross-solution/YAWIK/issues/comments/73525921","html_url":"https://github.com/cross-solution/YAWIK/issues/82#issuecomment-73525921","issue_url":"https://api.github.com/repos/cross-solution/YAWIK/issues/82","id":73525921,"user":{"login":"TiSiE","id":2029304,"avatar_url":"https://avatars.githubusercontent.com/u/2029304?v=3","gravatar_id":"","url":"https://api.github.com/users/TiSiE","html_url":"https://github.com/TiSiE","followers_url":"https://api.github.com/users/TiSiE/followers","following_url":"https://api.github.com/users/TiSiE/following{/other_user}","gists_url":"https://api.github.com/users/TiSiE/gists{/gist_id}","starred_url":"https://api.github.com/users/TiSiE/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/TiSiE/subscriptions","organizations_url":"https://api.github.com/users/TiSiE/orgs","repos_url":"https://api.github.com/users/TiSiE/repos","events_url":"https://api.github.com/users/TiSiE/events{/privacy}","received_events_url":"https://api.github.com/users/TiSiE/received_events","type":"User","site_admin":false},"created_at":"2015-02-09T15:20:42Z","updated_at":"2015-02-09T15:20:42Z","body":"Some notes to clearify the linked diagrams:\r\nThese steps has to be done:\r\n* Create a XSS Filter class (implemening \\Zend\\Filter\\FilterInterface)\r\n* Register this filter in the Filter Plugin Manager.   \r\n  This is done by configuring the mapping in the filter plugin manager config, which is found in the main application config under the key \"filters\" (which is a service manager configuration array)   \r\ne.g. <pre>\r\n     \"filters\" => array(\r\n          \"invokables\" => array(\r\n                 \"Core/Xss\" => \"\\Core\\Filter\\XssFilter\",\r\n         )\r\n      )</pre>\r\n* Attach this filter to the elements which should be using it.   \r\n  in the case of jobs, the only element currently is \"\\Core\\Form\\Element\\Editor\"\r\n  * Make the element an input provider for \\Zend\\InputFilter by implementing \"\\Zend\\InputFilter\\InputProviderInterface\"\r\n  * In the \"getInputSpecification()\" method, configure the use of the Xss filter\r\n<pre>\r\n    return array(\r\n         ...\r\n        \"filters\" => array(\r\n               \"Core/XssFilter\"\r\n        )\r\n</pre>\r\n(Maybe the syntax is slightly different, I'm not sure at the moment.)\r\n\r\n"}}