{"action":"created","issue":{"url":"https://api.github.com/repos/highfidelity/hifi/issues/5594","labels_url":"https://api.github.com/repos/highfidelity/hifi/issues/5594/labels{/name}","comments_url":"https://api.github.com/repos/highfidelity/hifi/issues/5594/comments","events_url":"https://api.github.com/repos/highfidelity/hifi/issues/5594/events","html_url":"https://github.com/highfidelity/hifi/pull/5594","id":101757568,"number":5594,"title":"CR for Job #20638 - Scripting: WebSocket Implementation","user":{"login":"thoys","id":607735,"avatar_url":"https://avatars.githubusercontent.com/u/607735?v=3","gravatar_id":"","url":"https://api.github.com/users/thoys","html_url":"https://github.com/thoys","followers_url":"https://api.github.com/users/thoys/followers","following_url":"https://api.github.com/users/thoys/following{/other_user}","gists_url":"https://api.github.com/users/thoys/gists{/gist_id}","starred_url":"https://api.github.com/users/thoys/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/thoys/subscriptions","organizations_url":"https://api.github.com/users/thoys/orgs","repos_url":"https://api.github.com/users/thoys/repos","events_url":"https://api.github.com/users/thoys/events{/privacy}","received_events_url":"https://api.github.com/users/thoys/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":9,"created_at":"2015-08-18T21:51:15Z","updated_at":"2015-08-19T20:01:11Z","closed_at":null,"pull_request":{"url":"https://api.github.com/repos/highfidelity/hifi/pulls/5594","html_url":"https://github.com/highfidelity/hifi/pull/5594","diff_url":"https://github.com/highfidelity/hifi/pull/5594.diff","patch_url":"https://github.com/highfidelity/hifi/pull/5594.patch"},"body":"Code Review for Job #20638 - Workitem available at https://www.worklist.net/20638"},"comment":{"url":"https://api.github.com/repos/highfidelity/hifi/issues/comments/132761475","html_url":"https://github.com/highfidelity/hifi/pull/5594#issuecomment-132761475","issue_url":"https://api.github.com/repos/highfidelity/hifi/issues/5594","id":132761475,"user":{"login":"huffman","id":167747,"avatar_url":"https://avatars.githubusercontent.com/u/167747?v=3","gravatar_id":"","url":"https://api.github.com/users/huffman","html_url":"https://github.com/huffman","followers_url":"https://api.github.com/users/huffman/followers","following_url":"https://api.github.com/users/huffman/following{/other_user}","gists_url":"https://api.github.com/users/huffman/gists{/gist_id}","starred_url":"https://api.github.com/users/huffman/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/huffman/subscriptions","organizations_url":"https://api.github.com/users/huffman/orgs","repos_url":"https://api.github.com/users/huffman/repos","events_url":"https://api.github.com/users/huffman/events{/privacy}","received_events_url":"https://api.github.com/users/huffman/received_events","type":"User","site_admin":false},"created_at":"2015-08-19T20:01:11Z","updated_at":"2015-08-19T20:01:11Z","body":"@jherico I do think we need to spend more time thinking about this. Qt exposes a lot of methods by default, so I have some concerns about exploits making their way through without being explicitly visible to us.\r\n\r\nThat said, we do already provide a way to communicate to external servers via XMLHttpRequest. I can't think of any specific interface where we provide access to a user's file system - XMLHttpRequest did previously allow requests to `file:` urls, but that was removed for (obvious) security reasons."}}