{"push_id":550053948,"size":7,"distinct_size":7,"ref":"refs/heads/master","head":"93092c36c71df0a2b6f469642e49a060db387fe2","before":"c48f345c723b3bf265fc082c509309fe990ba02f","commits":[{"sha":"ba46e65b9559e29d495235f1b72022af0f8b9e3d","author":{"email":"433499b808d2e517651fc150340e6bdd32bdc896@google.com","name":"Claudio Criscione"},"message":"Update Rosetta Flash URL (http -> https).\n-------------\nCreated by MOE: http://code.google.com/p/moe-java\nMOE_MIGRATED_REVID=83324365","distinct":true,"url":"https://api.github.com/repos/google/firing-range/commits/ba46e65b9559e29d495235f1b72022af0f8b9e3d"},{"sha":"2076869b6846bafb85c58400884105d059020b74","author":{"email":"433499b808d2e517651fc150340e6bdd32bdc896@google.com","name":"Claudio Criscione"},"message":"Clarify the text in remoteinclude and make the link SSL so that the page does not generate mixed content.\n-------------\nCreated by MOE: http://code.google.com/p/moe-java\nMOE_MIGRATED_REVID=83499606","distinct":true,"url":"https://api.github.com/repos/google/firing-range/commits/2076869b6846bafb85c58400884105d059020b74"},{"sha":"7c89ab761e23bb572924c4bfd42f6a860b18f6d2","author":{"email":"433499b808d2e517651fc150340e6bdd32bdc896@google.com","name":"Claudio Criscione"},"message":"Cover all types of Universal Reverse Clickjacking vulnerability in Firing Range: on the same page (parameter in URL or hash), on different pages (parameter in URL or hash -> via frames or popups, depending on the X-Frame-Options header).\n\nMake the JSONP servlet check maximum length of the callback and reject empty ones.\n\nAdd tests.\n-------------\nCreated by MOE: http://code.google.com/p/moe-java\nMOE_MIGRATED_REVID=83800037","distinct":true,"url":"https://api.github.com/repos/google/firing-range/commits/7c89ab761e23bb572924c4bfd42f6a860b18f6d2"},{"sha":"e34137f883b2c2d2827bc76f121c15ddc88fd9f1","author":{"email":"433499b808d2e517651fc150340e6bdd32bdc896@google.com","name":"Claudio Criscione"},"message":"Update web.xml for public Firing Range to use new class names for URC.\n-------------\nCreated by MOE: http://code.google.com/p/moe-java\nMOE_MIGRATED_REVID=83860874","distinct":true,"url":"https://api.github.com/repos/google/firing-range/commits/e34137f883b2c2d2827bc76f121c15ddc88fd9f1"},{"sha":"a85874c5409c7f7093dd1a3bd141303575d731c3","author":{"email":"433499b808d2e517651fc150340e6bdd32bdc896@google.com","name":"Claudio Criscione"},"message":"Avoid making the Universal Reverse Clickjacking vulnerability an XSS too by URL-escaping for HTML and by creating the script element in the DOM in JS.\n-------------\nCreated by MOE: http://code.google.com/p/moe-java\nMOE_MIGRATED_REVID=84030155","distinct":true,"url":"https://api.github.com/repos/google/firing-range/commits/a85874c5409c7f7093dd1a3bd141303575d731c3"},{"sha":"5834ca53dae7f9c101f280feb53b27319a454bec","author":{"email":"433499b808d2e517651fc150340e6bdd32bdc896@google.com","name":"Claudio Criscione"},"message":"Upgrade to ssl the link in the readme.\n-------------\nCreated by MOE: http://code.google.com/p/moe-java\nMOE_MIGRATED_REVID=84277149","distinct":true,"url":"https://api.github.com/repos/google/firing-range/commits/5834ca53dae7f9c101f280feb53b27319a454bec"},{"sha":"93092c36c71df0a2b6f469642e49a060db387fe2","author":{"email":"433499b808d2e517651fc150340e6bdd32bdc896@google.com","name":"Claudio Criscione"},"message":"Remove dependency from non opensourced Uri class and add tests for Meta redirect.\n-------------\nCreated by MOE: http://code.google.com/p/moe-java\nMOE_MIGRATED_REVID=84278905","distinct":true,"url":"https://api.github.com/repos/google/firing-range/commits/93092c36c71df0a2b6f469642e49a060db387fe2"}]}