{"action":"created","issue":{"url":"https://api.github.com/repos/yeastgenome/SGDFrontend/issues/130","labels_url":"https://api.github.com/repos/yeastgenome/SGDFrontend/issues/130/labels{/name}","comments_url":"https://api.github.com/repos/yeastgenome/SGDFrontend/issues/130/comments","events_url":"https://api.github.com/repos/yeastgenome/SGDFrontend/issues/130/events","html_url":"https://github.com/yeastgenome/SGDFrontend/pull/130","id":115567871,"number":130,"title":"Escaping the query value to prevent XSS attacks","user":{"login":"pedrohr","id":467687,"avatar_url":"https://avatars.githubusercontent.com/u/467687?v=3","gravatar_id":"","url":"https://api.github.com/users/pedrohr","html_url":"https://github.com/pedrohr","followers_url":"https://api.github.com/users/pedrohr/followers","following_url":"https://api.github.com/users/pedrohr/following{/other_user}","gists_url":"https://api.github.com/users/pedrohr/gists{/gist_id}","starred_url":"https://api.github.com/users/pedrohr/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/pedrohr/subscriptions","organizations_url":"https://api.github.com/users/pedrohr/orgs","repos_url":"https://api.github.com/users/pedrohr/repos","events_url":"https://api.github.com/users/pedrohr/events{/privacy}","received_events_url":"https://api.github.com/users/pedrohr/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":2,"created_at":"2015-11-06T19:10:08Z","updated_at":"2015-11-09T22:46:05Z","closed_at":null,"pull_request":{"url":"https://api.github.com/repos/yeastgenome/SGDFrontend/pulls/130","html_url":"https://github.com/yeastgenome/SGDFrontend/pull/130","diff_url":"https://github.com/yeastgenome/SGDFrontend/pull/130.diff","patch_url":"https://github.com/yeastgenome/SGDFrontend/pull/130.patch"},"body":"There are two options to prevent XSS attacks in this case, we can either escape the search before we send it to the Backend or we escape data[0] as it comes back in the callback without any treatment. \r\n\r\nI chose for the 2nd option so we don't interfere in the language accepted by our search engine."},"comment":{"url":"https://api.github.com/repos/yeastgenome/SGDFrontend/issues/comments/155222964","html_url":"https://github.com/yeastgenome/SGDFrontend/pull/130#issuecomment-155222964","issue_url":"https://api.github.com/repos/yeastgenome/SGDFrontend/issues/130","id":155222964,"user":{"login":"ragingsquirrel3","id":1258388,"avatar_url":"https://avatars.githubusercontent.com/u/1258388?v=3","gravatar_id":"","url":"https://api.github.com/users/ragingsquirrel3","html_url":"https://github.com/ragingsquirrel3","followers_url":"https://api.github.com/users/ragingsquirrel3/followers","following_url":"https://api.github.com/users/ragingsquirrel3/following{/other_user}","gists_url":"https://api.github.com/users/ragingsquirrel3/gists{/gist_id}","starred_url":"https://api.github.com/users/ragingsquirrel3/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/ragingsquirrel3/subscriptions","organizations_url":"https://api.github.com/users/ragingsquirrel3/orgs","repos_url":"https://api.github.com/users/ragingsquirrel3/repos","events_url":"https://api.github.com/users/ragingsquirrel3/events{/privacy}","received_events_url":"https://api.github.com/users/ragingsquirrel3/received_events","type":"User","site_admin":false},"created_at":"2015-11-09T22:46:05Z","updated_at":"2015-11-09T22:46:05Z","body":"I'm not going to merge this because this part of this file doesn't really do anything.  The REAL logic lives in the fasolt SVN thingy.  I made the same change there.  Soon, this will all be handled by the \"new\" search."}}