{"action":"closed","number":8446,"pull_request":{"url":"https://api.github.com/repos/xbmc/xbmc/pulls/8446","id":51924506,"html_url":"https://github.com/xbmc/xbmc/pull/8446","diff_url":"https://github.com/xbmc/xbmc/pull/8446.diff","patch_url":"https://github.com/xbmc/xbmc/pull/8446.patch","issue_url":"https://api.github.com/repos/xbmc/xbmc/issues/8446","number":8446,"state":"closed","locked":false,"title":"[webserver] - fixed possible directory traversal bug due to insuffici…","user":{"login":"Memphiz","id":701326,"avatar_url":"https://avatars.githubusercontent.com/u/701326?v=3","gravatar_id":"","url":"https://api.github.com/users/Memphiz","html_url":"https://github.com/Memphiz","followers_url":"https://api.github.com/users/Memphiz/followers","following_url":"https://api.github.com/users/Memphiz/following{/other_user}","gists_url":"https://api.github.com/users/Memphiz/gists{/gist_id}","starred_url":"https://api.github.com/users/Memphiz/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/Memphiz/subscriptions","organizations_url":"https://api.github.com/users/Memphiz/orgs","repos_url":"https://api.github.com/users/Memphiz/repos","events_url":"https://api.github.com/users/Memphiz/events{/privacy}","received_events_url":"https://api.github.com/users/Memphiz/received_events","type":"User","site_admin":false},"body":"…ent url checking\r\n\r\nAs pointed out by forum member ChessSpider the security fix here:\r\n\r\nhttps://github.com/xbmc/xbmc/commit/bdff099c024521941cb0956fe01d99ab52a65335\r\n\r\nwas accidently removed again here:\r\n\r\nhttps://github.com/xbmc/xbmc/commit/12917d556ab25defdba5264e93622df9e60bee66\r\n\r\nAllowing to access any possible file from our webserver.\r\n\r\n@Montellese one sanity check please\r\n\r\nthx to ChessSpider for reporting it in.","created_at":"2015-11-26T15:27:23Z","updated_at":"2015-11-29T11:25:14Z","closed_at":"2015-11-29T11:25:14Z","merged_at":"2015-11-29T11:25:14Z","merge_commit_sha":"4c9b7fc80ad8e11bff1bc4ca9d26e86f8b4f47d7","assignee":null,"milestone":{"url":"https://api.github.com/repos/xbmc/xbmc/milestones/73","html_url":"https://github.com/xbmc/xbmc/milestones/Jarvis%2016.0-beta3","labels_url":"https://api.github.com/repos/xbmc/xbmc/milestones/73/labels","id":1423647,"number":73,"title":"Jarvis 16.0-beta3","description":"","creator":{"login":"MartijnKaijser","id":907436,"avatar_url":"https://avatars.githubusercontent.com/u/907436?v=3","gravatar_id":"","url":"https://api.github.com/users/MartijnKaijser","html_url":"https://github.com/MartijnKaijser","followers_url":"https://api.github.com/users/MartijnKaijser/followers","following_url":"https://api.github.com/users/MartijnKaijser/following{/other_user}","gists_url":"https://api.github.com/users/MartijnKaijser/gists{/gist_id}","starred_url":"https://api.github.com/users/MartijnKaijser/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/MartijnKaijser/subscriptions","organizations_url":"https://api.github.com/users/MartijnKaijser/orgs","repos_url":"https://api.github.com/users/MartijnKaijser/repos","events_url":"https://api.github.com/users/MartijnKaijser/events{/privacy}","received_events_url":"https://api.github.com/users/MartijnKaijser/received_events","type":"User","site_admin":false},"open_issues":6,"closed_issues":21,"state":"open","created_at":"2015-11-22T09:05:01Z","updated_at":"2015-11-29T11:25:14Z","due_on":"2015-11-28T23:00:00Z","closed_at":null},"commits_url":"https://api.github.com/repos/xbmc/xbmc/pulls/8446/commits","review_comments_url":"https://api.github.com/repos/xbmc/xbmc/pulls/8446/comments","review_comment_url":"https://api.github.com/repos/xbmc/xbmc/pulls/comments{/number}","comments_url":"https://api.github.com/repos/xbmc/xbmc/issues/8446/comments","statuses_url":"https://api.github.com/repos/xbmc/xbmc/statuses/4e903ffd3803454bdfae37b8fd453906c681e2a6","head":{"label":"Memphiz:fix_http_traversal","ref":"fix_http_traversal","sha":"4e903ffd3803454bdfae37b8fd453906c681e2a6","user":{"login":"Memphiz","id":701326,"avatar_url":"https://avatars.githubusercontent.com/u/701326?v=3","gravatar_id":"","url":"https://api.github.com/users/Memphiz","html_url":"https://github.com/Memphiz","followers_url":"https://api.github.com/users/Memphiz/followers","following_url":"https://api.github.com/users/Memphiz/following{/other_user}","gists_url":"https://api.github.com/users/Memphiz/gists{/gist_id}","starred_url":"https://api.github.com/users/Memphiz/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/Memphiz/subscriptions","organizations_url":"https://api.github.com/users/Memphiz/orgs","repos_url":"https://api.github.com/users/Memphiz/repos","events_url":"https://api.github.com/users/Memphiz/events{/privacy}","received_events_url":"https://api.github.com/users/Memphiz/received_events","type":"User","site_admin":false},"repo":{"id":1550525,"name":"xbmc","full_name":"Memphiz/xbmc","owner":{"login":"Memphiz","id":701326,"avatar_url":"https://avatars.githubusercontent.com/u/701326?v=3","gravatar_id":"","url":"https://api.github.com/users/Memphiz","html_url":"https://github.com/Memphiz","followers_url":"https://api.github.com/users/Memphiz/followers","following_url":"https://api.github.com/users/Memphiz/following{/other_user}","gists_url":"https://api.github.com/users/Memphiz/gists{/gist_id}","starred_url":"https://api.github.com/users/Memphiz/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/Memphiz/subscriptions","organizations_url":"https://api.github.com/users/Memphiz/orgs","repos_url":"https://api.github.com/users/Memphiz/repos","events_url":"https://api.github.com/users/Memphiz/events{/privacy}","received_events_url":"https://api.github.com/users/Memphiz/received_events","type":"User","site_admin":false},"private":false,"html_url":"https://github.com/Memphiz/xbmc","description":"XBMC Main Repository","fork":true,"url":"https://api.github.com/repos/Memphiz/xbmc","forks_url":"https://api.github.com/repos/Memphiz/xbmc/forks","keys_url":"https://api.github.com/repos/Memphiz/xbmc/keys{/key_id}","collaborators_url":"https://api.github.com/repos/Memphiz/xbmc/collaborators{/collaborator}","teams_url":"https://api.github.com/repos/Memphiz/xbmc/teams","hooks_url":"https://api.github.com/repos/Memphiz/xbmc/hooks","issue_events_url":"https://api.github.com/repos/Memphiz/xbmc/issues/events{/number}","events_url":"https://api.github.com/repos/Memphiz/xbmc/events","assignees_url":"https://api.github.com/repos/Memphiz/xbmc/assignees{/user}","branches_url":"https://api.github.com/repos/Memphiz/xbmc/branches{/branch}","tags_url":"https://api.github.com/repos/Memphiz/xbmc/tags","blobs_url":"https://api.github.com/repos/Memphiz/xbmc/git/blobs{/sha}","git_tags_url":"https://api.github.com/repos/Memphiz/xbmc/git/tags{/sha}","git_refs_url":"https://api.github.com/repos/Memphiz/xbmc/git/refs{/sha}","trees_url":"https://api.github.com/repos/Memphiz/xbmc/git/trees{/sha}","statuses_url":"https://api.github.com/repos/Memphiz/xbmc/statuses/{sha}","languages_url":"https://api.github.com/repos/Memphiz/xbmc/languages","stargazers_url":"https://api.github.com/repos/Memphiz/xbmc/stargazers","contributors_url":"https://api.github.com/repos/Memphiz/xbmc/contributors","subscribers_url":"https://api.github.com/repos/Memphiz/xbmc/subscribers","subscription_url":"https://api.github.com/repos/Memphiz/xbmc/subscription","commits_url":"https://api.github.com/repos/Memphiz/xbmc/commits{/sha}","git_commits_url":"https://api.github.com/repos/Memphiz/xbmc/git/commits{/sha}","comments_url":"https://api.github.com/repos/Memphiz/xbmc/comments{/number}","issue_comment_url":"https://api.github.com/repos/Memphiz/xbmc/issues/comments{/number}","contents_url":"https://api.github.com/repos/Memphiz/xbmc/contents/{+path}","compare_url":"https://api.github.com/repos/Memphiz/xbmc/compare/{base}...{head}","merges_url":"https://api.github.com/repos/Memphiz/xbmc/merges","archive_url":"https://api.github.com/repos/Memphiz/xbmc/{archive_format}{/ref}","downloads_url":"https://api.github.com/repos/Memphiz/xbmc/downloads","issues_url":"https://api.github.com/repos/Memphiz/xbmc/issues{/number}","pulls_url":"https://api.github.com/repos/Memphiz/xbmc/pulls{/number}","milestones_url":"https://api.github.com/repos/Memphiz/xbmc/milestones{/number}","notifications_url":"https://api.github.com/repos/Memphiz/xbmc/notifications{?since,all,participating}","labels_url":"https://api.github.com/repos/Memphiz/xbmc/labels{/name}","releases_url":"https://api.github.com/repos/Memphiz/xbmc/releases{/id}","created_at":"2011-03-31T11:10:34Z","updated_at":"2015-10-12T16:19:22Z","pushed_at":"2015-11-28T18:27:16Z","git_url":"git://github.com/Memphiz/xbmc.git","ssh_url":"git@github.com:Memphiz/xbmc.git","clone_url":"https://github.com/Memphiz/xbmc.git","svn_url":"https://github.com/Memphiz/xbmc","homepage":"http://xbmc.org","size":541439,"stargazers_count":9,"watchers_count":9,"language":"C++","has_issues":false,"has_downloads":true,"has_wiki":false,"has_pages":false,"forks_count":5,"mirror_url":null,"open_issues_count":6,"forks":5,"open_issues":6,"watchers":9,"default_branch":"master"}},"base":{"label":"xbmc:master","ref":"master","sha":"0231f487e7191a6b3790cff5db14b04c13776d45","user":{"login":"xbmc","id":199122,"avatar_url":"https://avatars.githubusercontent.com/u/199122?v=3","gravatar_id":"","url":"https://api.github.com/users/xbmc","html_url":"https://github.com/xbmc","followers_url":"https://api.github.com/users/xbmc/followers","following_url":"https://api.github.com/users/xbmc/following{/other_user}","gists_url":"https://api.github.com/users/xbmc/gists{/gist_id}","starred_url":"https://api.github.com/users/xbmc/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/xbmc/subscriptions","organizations_url":"https://api.github.com/users/xbmc/orgs","repos_url":"https://api.github.com/users/xbmc/repos","events_url":"https://api.github.com/users/xbmc/events{/privacy}","received_events_url":"https://api.github.com/users/xbmc/received_events","type":"Organization","site_admin":false},"repo":{"id":1217614,"name":"xbmc","full_name":"xbmc/xbmc","owner":{"login":"xbmc","id":199122,"avatar_url":"https://avatars.githubusercontent.com/u/199122?v=3","gravatar_id":"","url":"https://api.github.com/users/xbmc","html_url":"https://github.com/xbmc","followers_url":"https://api.github.com/users/xbmc/followers","following_url":"https://api.github.com/users/xbmc/following{/other_user}","gists_url":"https://api.github.com/users/xbmc/gists{/gist_id}","starred_url":"https://api.github.com/users/xbmc/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/xbmc/subscriptions","organizations_url":"https://api.github.com/users/xbmc/orgs","repos_url":"https://api.github.com/users/xbmc/repos","events_url":"https://api.github.com/users/xbmc/events{/privacy}","received_events_url":"https://api.github.com/users/xbmc/received_events","type":"Organization","site_admin":false},"private":false,"html_url":"https://github.com/xbmc/xbmc","description":"Kodi Main Repository - By using this code you agree with our policy and will follow the GPLv2 license as included","fork":false,"url":"https://api.github.com/repos/xbmc/xbmc","forks_url":"https://api.github.com/repos/xbmc/xbmc/forks","keys_url":"https://api.github.com/repos/xbmc/xbmc/keys{/key_id}","collaborators_url":"https://api.github.com/repos/xbmc/xbmc/collaborators{/collaborator}","teams_url":"https://api.github.com/repos/xbmc/xbmc/teams","hooks_url":"https://api.github.com/repos/xbmc/xbmc/hooks","issue_events_url":"https://api.github.com/repos/xbmc/xbmc/issues/events{/number}","events_url":"https://api.github.com/repos/xbmc/xbmc/events","assignees_url":"https://api.github.com/repos/xbmc/xbmc/assignees{/user}","branches_url":"https://api.github.com/repos/xbmc/xbmc/branches{/branch}","tags_url":"https://api.github.com/repos/xbmc/xbmc/tags","blobs_url":"https://api.github.com/repos/xbmc/xbmc/git/blobs{/sha}","git_tags_url":"https://api.github.com/repos/xbmc/xbmc/git/tags{/sha}","git_refs_url":"https://api.github.com/repos/xbmc/xbmc/git/refs{/sha}","trees_url":"https://api.github.com/repos/xbmc/xbmc/git/trees{/sha}","statuses_url":"https://api.github.com/repos/xbmc/xbmc/statuses/{sha}","languages_url":"https://api.github.com/repos/xbmc/xbmc/languages","stargazers_url":"https://api.github.com/repos/xbmc/xbmc/stargazers","contributors_url":"https://api.github.com/repos/xbmc/xbmc/contributors","subscribers_url":"https://api.github.com/repos/xbmc/xbmc/subscribers","subscription_url":"https://api.github.com/repos/xbmc/xbmc/subscription","commits_url":"https://api.github.com/repos/xbmc/xbmc/commits{/sha}","git_commits_url":"https://api.github.com/repos/xbmc/xbmc/git/commits{/sha}","comments_url":"https://api.github.com/repos/xbmc/xbmc/comments{/number}","issue_comment_url":"https://api.github.com/repos/xbmc/xbmc/issues/comments{/number}","contents_url":"https://api.github.com/repos/xbmc/xbmc/contents/{+path}","compare_url":"https://api.github.com/repos/xbmc/xbmc/compare/{base}...{head}","merges_url":"https://api.github.com/repos/xbmc/xbmc/merges","archive_url":"https://api.github.com/repos/xbmc/xbmc/{archive_format}{/ref}","downloads_url":"https://api.github.com/repos/xbmc/xbmc/downloads","issues_url":"https://api.github.com/repos/xbmc/xbmc/issues{/number}","pulls_url":"https://api.github.com/repos/xbmc/xbmc/pulls{/number}","milestones_url":"https://api.github.com/repos/xbmc/xbmc/milestones{/number}","notifications_url":"https://api.github.com/repos/xbmc/xbmc/notifications{?since,all,participating}","labels_url":"https://api.github.com/repos/xbmc/xbmc/labels{/name}","releases_url":"https://api.github.com/repos/xbmc/xbmc/releases{/id}","created_at":"2011-01-03T21:18:51Z","updated_at":"2015-11-29T10:35:30Z","pushed_at":"2015-11-29T11:25:14Z","git_url":"git://github.com/xbmc/xbmc.git","ssh_url":"git@github.com:xbmc/xbmc.git","clone_url":"https://github.com/xbmc/xbmc.git","svn_url":"https://github.com/xbmc/xbmc","homepage":"http://kodi.wiki/view/Official:Trademark_Policy","size":1710748,"stargazers_count":4300,"watchers_count":4300,"language":"C++","has_issues":false,"has_downloads":true,"has_wiki":false,"has_pages":false,"forks_count":3161,"mirror_url":null,"open_issues_count":220,"forks":3161,"open_issues":220,"watchers":4300,"default_branch":"master"}},"_links":{"self":{"href":"https://api.github.com/repos/xbmc/xbmc/pulls/8446"},"html":{"href":"https://github.com/xbmc/xbmc/pull/8446"},"issue":{"href":"https://api.github.com/repos/xbmc/xbmc/issues/8446"},"comments":{"href":"https://api.github.com/repos/xbmc/xbmc/issues/8446/comments"},"review_comments":{"href":"https://api.github.com/repos/xbmc/xbmc/pulls/8446/comments"},"review_comment":{"href":"https://api.github.com/repos/xbmc/xbmc/pulls/comments{/number}"},"commits":{"href":"https://api.github.com/repos/xbmc/xbmc/pulls/8446/commits"},"statuses":{"href":"https://api.github.com/repos/xbmc/xbmc/statuses/4e903ffd3803454bdfae37b8fd453906c681e2a6"}},"merged":true,"mergeable":null,"mergeable_state":"unknown","merged_by":{"login":"jenkins4kodi","id":8507773,"avatar_url":"https://avatars.githubusercontent.com/u/8507773?v=3","gravatar_id":"","url":"https://api.github.com/users/jenkins4kodi","html_url":"https://github.com/jenkins4kodi","followers_url":"https://api.github.com/users/jenkins4kodi/followers","following_url":"https://api.github.com/users/jenkins4kodi/following{/other_user}","gists_url":"https://api.github.com/users/jenkins4kodi/gists{/gist_id}","starred_url":"https://api.github.com/users/jenkins4kodi/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/jenkins4kodi/subscriptions","organizations_url":"https://api.github.com/users/jenkins4kodi/orgs","repos_url":"https://api.github.com/users/jenkins4kodi/repos","events_url":"https://api.github.com/users/jenkins4kodi/events{/privacy}","received_events_url":"https://api.github.com/users/jenkins4kodi/received_events","type":"User","site_admin":false},"comments":2,"review_comments":0,"commits":1,"additions":7,"deletions":0,"changed_files":1}}