{"action":"created","issue":{"url":"https://api.github.com/repos/SpiderLabs/owasp-modsecurity-crs/issues/211","labels_url":"https://api.github.com/repos/SpiderLabs/owasp-modsecurity-crs/issues/211/labels{/name}","comments_url":"https://api.github.com/repos/SpiderLabs/owasp-modsecurity-crs/issues/211/comments","events_url":"https://api.github.com/repos/SpiderLabs/owasp-modsecurity-crs/issues/211/events","html_url":"https://github.com/SpiderLabs/owasp-modsecurity-crs/pull/211","id":60464673,"number":211,"title":"Fixed PHP tag bypass","user":{"login":"zit-hb","id":8362751,"avatar_url":"https://avatars.githubusercontent.com/u/8362751?v=3","gravatar_id":"","url":"https://api.github.com/users/zit-hb","html_url":"https://github.com/zit-hb","followers_url":"https://api.github.com/users/zit-hb/followers","following_url":"https://api.github.com/users/zit-hb/following{/other_user}","gists_url":"https://api.github.com/users/zit-hb/gists{/gist_id}","starred_url":"https://api.github.com/users/zit-hb/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/zit-hb/subscriptions","organizations_url":"https://api.github.com/users/zit-hb/orgs","repos_url":"https://api.github.com/users/zit-hb/repos","events_url":"https://api.github.com/users/zit-hb/events{/privacy}","received_events_url":"https://api.github.com/users/zit-hb/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":1,"created_at":"2015-03-10T08:17:50Z","updated_at":"2015-03-10T17:36:37Z","closed_at":null,"pull_request":{"url":"https://api.github.com/repos/SpiderLabs/owasp-modsecurity-crs/pulls/211","html_url":"https://github.com/SpiderLabs/owasp-modsecurity-crs/pull/211","diff_url":"https://github.com/SpiderLabs/owasp-modsecurity-crs/pull/211.diff","patch_url":"https://github.com/SpiderLabs/owasp-modsecurity-crs/pull/211.patch"},"body":"Hey. It is possible to bypass the regular expression to detect the PHP tag if short_open_tag is enabled.\r\n\r\nExample:\r\n\r\n    <?xml_parser_create();\r\n\r\nThis can be fixed by checking for a whitespace after `xml`."},"comment":{"url":"https://api.github.com/repos/SpiderLabs/owasp-modsecurity-crs/issues/comments/78105992","html_url":"https://github.com/SpiderLabs/owasp-modsecurity-crs/pull/211#issuecomment-78105992","issue_url":"https://api.github.com/repos/SpiderLabs/owasp-modsecurity-crs/issues/211","id":78105992,"user":{"login":"csanders-git","id":4632287,"avatar_url":"https://avatars.githubusercontent.com/u/4632287?v=3","gravatar_id":"","url":"https://api.github.com/users/csanders-git","html_url":"https://github.com/csanders-git","followers_url":"https://api.github.com/users/csanders-git/followers","following_url":"https://api.github.com/users/csanders-git/following{/other_user}","gists_url":"https://api.github.com/users/csanders-git/gists{/gist_id}","starred_url":"https://api.github.com/users/csanders-git/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/csanders-git/subscriptions","organizations_url":"https://api.github.com/users/csanders-git/orgs","repos_url":"https://api.github.com/users/csanders-git/repos","events_url":"https://api.github.com/users/csanders-git/events{/privacy}","received_events_url":"https://api.github.com/users/csanders-git/received_events","type":"User","site_admin":false},"created_at":"2015-03-10T17:36:36Z","updated_at":"2015-03-10T17:36:36Z","body":"This is a good catch, merging."}}