{"action":"created","issue":{"url":"https://api.github.com/repos/piwik/tracker-proxy/issues/2","labels_url":"https://api.github.com/repos/piwik/tracker-proxy/issues/2/labels{/name}","comments_url":"https://api.github.com/repos/piwik/tracker-proxy/issues/2/comments","events_url":"https://api.github.com/repos/piwik/tracker-proxy/issues/2/events","html_url":"https://github.com/piwik/tracker-proxy/pull/2","id":62933940,"number":2,"title":"Blacklist some params that would normally require authentication","user":{"login":"benjaminpick","id":244542,"avatar_url":"https://avatars.githubusercontent.com/u/244542?v=3","gravatar_id":"","url":"https://api.github.com/users/benjaminpick","html_url":"https://github.com/benjaminpick","followers_url":"https://api.github.com/users/benjaminpick/followers","following_url":"https://api.github.com/users/benjaminpick/following{/other_user}","gists_url":"https://api.github.com/users/benjaminpick/gists{/gist_id}","starred_url":"https://api.github.com/users/benjaminpick/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/benjaminpick/subscriptions","organizations_url":"https://api.github.com/users/benjaminpick/orgs","repos_url":"https://api.github.com/users/benjaminpick/repos","events_url":"https://api.github.com/users/benjaminpick/events{/privacy}","received_events_url":"https://api.github.com/users/benjaminpick/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":2,"created_at":"2015-03-19T09:52:47Z","updated_at":"2015-03-21T12:50:47Z","closed_at":null,"pull_request":{"url":"https://api.github.com/repos/piwik/tracker-proxy/pulls/2","html_url":"https://github.com/piwik/tracker-proxy/pull/2","diff_url":"https://github.com/piwik/tracker-proxy/pull/2.diff","patch_url":"https://github.com/piwik/tracker-proxy/pull/2.patch"},"body":"The Piwik proxy uses authentification to pass on the original IP. This shouldn't be mis-used to allow the other parameters like overriding date or location. \r\n\r\nAs there might be uses out there which rely on this, this can be switched off in the config (by turning `$allow_override_parameter` on.)"},"comment":{"url":"https://api.github.com/repos/piwik/tracker-proxy/issues/comments/84331861","html_url":"https://github.com/piwik/tracker-proxy/pull/2#issuecomment-84331861","issue_url":"https://api.github.com/repos/piwik/tracker-proxy/issues/2","id":84331861,"user":{"login":"benjaminpick","id":244542,"avatar_url":"https://avatars.githubusercontent.com/u/244542?v=3","gravatar_id":"","url":"https://api.github.com/users/benjaminpick","html_url":"https://github.com/benjaminpick","followers_url":"https://api.github.com/users/benjaminpick/followers","following_url":"https://api.github.com/users/benjaminpick/following{/other_user}","gists_url":"https://api.github.com/users/benjaminpick/gists{/gist_id}","starred_url":"https://api.github.com/users/benjaminpick/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/benjaminpick/subscriptions","organizations_url":"https://api.github.com/users/benjaminpick/orgs","repos_url":"https://api.github.com/users/benjaminpick/repos","events_url":"https://api.github.com/users/benjaminpick/events{/privacy}","received_events_url":"https://api.github.com/users/benjaminpick/received_events","type":"User","site_admin":false},"created_at":"2015-03-21T12:50:47Z","updated_at":"2015-03-21T12:50:47Z","body":"I agree about your point: the proxy should behave like the original, so\nauthentication via token_auth must be possible.\n"}}