{"action":"created","issue":{"url":"https://api.github.com/repos/silkapp/rest/issues/137","labels_url":"https://api.github.com/repos/silkapp/rest/issues/137/labels{/name}","comments_url":"https://api.github.com/repos/silkapp/rest/issues/137/comments","events_url":"https://api.github.com/repos/silkapp/rest/issues/137/events","html_url":"https://github.com/silkapp/rest/issues/137","id":93156306,"number":137,"title":"Getting an uploaded file","user":{"login":"jonkri","id":777056,"avatar_url":"https://avatars.githubusercontent.com/u/777056?v=3","gravatar_id":"","url":"https://api.github.com/users/jonkri","html_url":"https://github.com/jonkri","followers_url":"https://api.github.com/users/jonkri/followers","following_url":"https://api.github.com/users/jonkri/following{/other_user}","gists_url":"https://api.github.com/users/jonkri/gists{/gist_id}","starred_url":"https://api.github.com/users/jonkri/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/jonkri/subscriptions","organizations_url":"https://api.github.com/users/jonkri/orgs","repos_url":"https://api.github.com/users/jonkri/repos","events_url":"https://api.github.com/users/jonkri/events{/privacy}","received_events_url":"https://api.github.com/users/jonkri/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":4,"created_at":"2015-07-05T23:24:32Z","updated_at":"2015-07-06T14:41:31Z","closed_at":null,"body":"When uploading files, the ByteString looks to include the complete request, including headers and whatnot. The ByteString will look something like this:\r\n\r\n![file](https://cloud.githubusercontent.com/assets/777056/8513890/5da9ef90-237d-11e5-9bfa-1eb8216b67cf.png)\r\n\r\nThis surprised me a bit - I thought I would be getting the uploaded file's content.\r\n\r\nI uploaded the file like so:\r\n\r\n    curl --header \"Content-Type: application/octet-stream\" --form upload=@big-buck-bunny_trailer.webm --request POST &lt;URL&gt;\r\n\r\nHow would a user go about extracting the actual file?\r\n\r\nMight be related to #68 and #102.\r\n\r\nThanks!"},"comment":{"url":"https://api.github.com/repos/silkapp/rest/issues/comments/118875954","html_url":"https://github.com/silkapp/rest/issues/137#issuecomment-118875954","issue_url":"https://api.github.com/repos/silkapp/rest/issues/137","id":118875954,"user":{"login":"bergmark","id":100681,"avatar_url":"https://avatars.githubusercontent.com/u/100681?v=3","gravatar_id":"","url":"https://api.github.com/users/bergmark","html_url":"https://github.com/bergmark","followers_url":"https://api.github.com/users/bergmark/followers","following_url":"https://api.github.com/users/bergmark/following{/other_user}","gists_url":"https://api.github.com/users/bergmark/gists{/gist_id}","starred_url":"https://api.github.com/users/bergmark/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/bergmark/subscriptions","organizations_url":"https://api.github.com/users/bergmark/orgs","repos_url":"https://api.github.com/users/bergmark/repos","events_url":"https://api.github.com/users/bergmark/events{/privacy}","received_events_url":"https://api.github.com/users/bergmark/received_events","type":"User","site_admin":false},"created_at":"2015-07-06T14:41:31Z","updated_at":"2015-07-06T14:41:31Z","body":"If we check the referrer + the user's browser isn't vulnerable to spoofing the referrer, it should be safe right?\r\n"}}