{"action":"created","issue":{"url":"https://api.github.com/repos/ether/etherpad-lite/issues/2737","labels_url":"https://api.github.com/repos/ether/etherpad-lite/issues/2737/labels{/name}","comments_url":"https://api.github.com/repos/ether/etherpad-lite/issues/2737/comments","events_url":"https://api.github.com/repos/ether/etherpad-lite/issues/2737/events","html_url":"https://github.com/ether/etherpad-lite/issues/2737","id":97264141,"number":2737,"title":"\":\" character in URL seems to generate \"bad url - posssible XSS attempt\" error response","user":{"login":"wrought","id":764063,"avatar_url":"https://avatars.githubusercontent.com/u/764063?v=3","gravatar_id":"","url":"https://api.github.com/users/wrought","html_url":"https://github.com/wrought","followers_url":"https://api.github.com/users/wrought/followers","following_url":"https://api.github.com/users/wrought/following{/other_user}","gists_url":"https://api.github.com/users/wrought/gists{/gist_id}","starred_url":"https://api.github.com/users/wrought/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/wrought/subscriptions","organizations_url":"https://api.github.com/users/wrought/orgs","repos_url":"https://api.github.com/users/wrought/repos","events_url":"https://api.github.com/users/wrought/events{/privacy}","received_events_url":"https://api.github.com/users/wrought/received_events","type":"User","site_admin":false},"labels":[],"state":"closed","locked":false,"assignee":null,"milestone":null,"comments":2,"created_at":"2015-07-25T22:51:05Z","updated_at":"2015-08-05T01:22:01Z","closed_at":"2015-08-04T20:13:41Z","body":"Not sure if this is an etherpad issue, cross-posting from riseup.net:\r\n\r\nhttps://user.riseup.net/ticket/326251/booking@omnicommons.org\r\n\r\nOn line 3 of this pad: https://pad.riseup.net/p/omnicommons is a URL that etherpad redirects to https://pad.riseup.net/redirect#https%3A//omnicommons.org/wiki/Event%3A2015/07/18_Commons_Working_Group which produces the error message \"bad url - posssible XSS attempt\" which seems to be an issue with the \":\" character in the URL, however the url-encoded equivalent of \"%3A\" produces the same result.\r\n\r\nOur work-around is to use the instructions:\r\n\r\n'right click \"Open Link in New Tab\"'"},"comment":{"url":"https://api.github.com/repos/ether/etherpad-lite/issues/comments/127811388","html_url":"https://github.com/ether/etherpad-lite/issues/2737#issuecomment-127811388","issue_url":"https://api.github.com/repos/ether/etherpad-lite/issues/2737","id":127811388,"user":{"login":"wrought","id":764063,"avatar_url":"https://avatars.githubusercontent.com/u/764063?v=3","gravatar_id":"","url":"https://api.github.com/users/wrought","html_url":"https://github.com/wrought","followers_url":"https://api.github.com/users/wrought/followers","following_url":"https://api.github.com/users/wrought/following{/other_user}","gists_url":"https://api.github.com/users/wrought/gists{/gist_id}","starred_url":"https://api.github.com/users/wrought/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/wrought/subscriptions","organizations_url":"https://api.github.com/users/wrought/orgs","repos_url":"https://api.github.com/users/wrought/repos","events_url":"https://api.github.com/users/wrought/events{/privacy}","received_events_url":"https://api.github.com/users/wrought/received_events","type":"User","site_admin":false},"created_at":"2015-08-05T01:22:01Z","updated_at":"2015-08-05T01:22:01Z","body":"I submitted a patch here: https://github.com/JohnMcLear/ep_hide_referrer/pull/12"}}