{"action":"created","issue":{"url":"https://api.github.com/repos/inveniosoftware/invenio/issues/3065","labels_url":"https://api.github.com/repos/inveniosoftware/invenio/issues/3065/labels{/name}","comments_url":"https://api.github.com/repos/inveniosoftware/invenio/issues/3065/comments","events_url":"https://api.github.com/repos/inveniosoftware/invenio/issues/3065/events","html_url":"https://github.com/inveniosoftware/invenio/pull/3065","id":71564402,"number":3065,"title":"WebStyle: HttpOnly cookie attribute","user":{"login":"tiborsimko","id":517546,"avatar_url":"https://avatars.githubusercontent.com/u/517546?v=3","gravatar_id":"","url":"https://api.github.com/users/tiborsimko","html_url":"https://github.com/tiborsimko","followers_url":"https://api.github.com/users/tiborsimko/followers","following_url":"https://api.github.com/users/tiborsimko/following{/other_user}","gists_url":"https://api.github.com/users/tiborsimko/gists{/gist_id}","starred_url":"https://api.github.com/users/tiborsimko/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/tiborsimko/subscriptions","organizations_url":"https://api.github.com/users/tiborsimko/orgs","repos_url":"https://api.github.com/users/tiborsimko/repos","events_url":"https://api.github.com/users/tiborsimko/events{/privacy}","received_events_url":"https://api.github.com/users/tiborsimko/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/inveniosoftware/invenio/labels/c_WebSession","name":"c_WebSession","color":"ededed"},{"url":"https://api.github.com/repos/inveniosoftware/invenio/labels/in_review","name":"in_review","color":"fef2c0"},{"url":"https://api.github.com/repos/inveniosoftware/invenio/labels/maint-1.0","name":"maint-1.0","color":"d4c5f9"},{"url":"https://api.github.com/repos/inveniosoftware/invenio/labels/p_major","name":"p_major","color":"e11d21"},{"url":"https://api.github.com/repos/inveniosoftware/invenio/labels/t_enhancement","name":"t_enhancement","color":"eb6420"}],"state":"open","locked":false,"assignee":{"login":"kaplun","id":119349,"avatar_url":"https://avatars.githubusercontent.com/u/119349?v=3","gravatar_id":"","url":"https://api.github.com/users/kaplun","html_url":"https://github.com/kaplun","followers_url":"https://api.github.com/users/kaplun/followers","following_url":"https://api.github.com/users/kaplun/following{/other_user}","gists_url":"https://api.github.com/users/kaplun/gists{/gist_id}","starred_url":"https://api.github.com/users/kaplun/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/kaplun/subscriptions","organizations_url":"https://api.github.com/users/kaplun/orgs","repos_url":"https://api.github.com/users/kaplun/repos","events_url":"https://api.github.com/users/kaplun/events{/privacy}","received_events_url":"https://api.github.com/users/kaplun/received_events","type":"User","site_admin":false},"milestone":{"url":"https://api.github.com/repos/inveniosoftware/invenio/milestones/9","html_url":"https://github.com/inveniosoftware/invenio/milestones/v1.0.x","labels_url":"https://api.github.com/repos/inveniosoftware/invenio/milestones/9/labels","id":762362,"number":9,"title":"v1.0.x","description":"","creator":{"login":"tiborsimko","id":517546,"avatar_url":"https://avatars.githubusercontent.com/u/517546?v=3","gravatar_id":"","url":"https://api.github.com/users/tiborsimko","html_url":"https://github.com/tiborsimko","followers_url":"https://api.github.com/users/tiborsimko/followers","following_url":"https://api.github.com/users/tiborsimko/following{/other_user}","gists_url":"https://api.github.com/users/tiborsimko/gists{/gist_id}","starred_url":"https://api.github.com/users/tiborsimko/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/tiborsimko/subscriptions","organizations_url":"https://api.github.com/users/tiborsimko/orgs","repos_url":"https://api.github.com/users/tiborsimko/repos","events_url":"https://api.github.com/users/tiborsimko/events{/privacy}","received_events_url":"https://api.github.com/users/tiborsimko/received_events","type":"User","site_admin":false},"open_issues":9,"closed_issues":11,"state":"open","created_at":"2014-08-22T09:40:06Z","updated_at":"2015-04-28T11:37:41Z","due_on":"2015-03-31T22:00:00Z","closed_at":null},"comments":1,"created_at":"2015-04-28T11:37:41Z","updated_at":"2015-04-28T12:17:04Z","closed_at":null,"pull_request":{"url":"https://api.github.com/repos/inveniosoftware/invenio/pulls/3065","html_url":"https://github.com/inveniosoftware/invenio/pull/3065","diff_url":"https://github.com/inveniosoftware/invenio/pull/3065.diff","patch_url":"https://github.com/inveniosoftware/invenio/pull/3065.patch"},"body":"* SECURITY Adds back the `HttpOnly` cookie attribute in order to better\r\n  protect against potential XSS vulnerabilities.  (closes #3064)\r\n\r\nSigned-off-by: Tibor Simko <tibor.simko@cern.ch>"},"comment":{"url":"https://api.github.com/repos/inveniosoftware/invenio/issues/comments/97040708","html_url":"https://github.com/inveniosoftware/invenio/pull/3065#issuecomment-97040708","issue_url":"https://api.github.com/repos/inveniosoftware/invenio/issues/3065","id":97040708,"user":{"login":"kaplun","id":119349,"avatar_url":"https://avatars.githubusercontent.com/u/119349?v=3","gravatar_id":"","url":"https://api.github.com/users/kaplun","html_url":"https://github.com/kaplun","followers_url":"https://api.github.com/users/kaplun/followers","following_url":"https://api.github.com/users/kaplun/following{/other_user}","gists_url":"https://api.github.com/users/kaplun/gists{/gist_id}","starred_url":"https://api.github.com/users/kaplun/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/kaplun/subscriptions","organizations_url":"https://api.github.com/users/kaplun/orgs","repos_url":"https://api.github.com/users/kaplun/repos","events_url":"https://api.github.com/users/kaplun/events{/privacy}","received_events_url":"https://api.github.com/users/kaplun/received_events","type":"User","site_admin":false},"created_at":"2015-04-28T12:17:04Z","updated_at":"2015-04-28T12:17:04Z","body":"@tiborsimko have you checked if BibEdit (ajax-based) still works?"}}