{"action":"created","issue":{"url":"https://api.github.com/repos/budde377/testPart/issues/54","labels_url":"https://api.github.com/repos/budde377/testPart/issues/54/labels{/name}","comments_url":"https://api.github.com/repos/budde377/testPart/issues/54/comments","events_url":"https://api.github.com/repos/budde377/testPart/issues/54/events","html_url":"https://github.com/budde377/testPart/issues/54","id":57627460,"number":54,"title":"Add token against XSRF","user":{"login":"budde377","id":3490507,"avatar_url":"https://avatars.githubusercontent.com/u/3490507?v=3","gravatar_id":"","url":"https://api.github.com/users/budde377","html_url":"https://github.com/budde377","followers_url":"https://api.github.com/users/budde377/followers","following_url":"https://api.github.com/users/budde377/following{/other_user}","gists_url":"https://api.github.com/users/budde377/gists{/gist_id}","starred_url":"https://api.github.com/users/budde377/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/budde377/subscriptions","organizations_url":"https://api.github.com/users/budde377/orgs","repos_url":"https://api.github.com/users/budde377/repos","events_url":"https://api.github.com/users/budde377/events{/privacy}","received_events_url":"https://api.github.com/users/budde377/received_events","type":"User","site_admin":false},"labels":[],"state":"closed","locked":false,"assignee":null,"milestone":null,"comments":1,"created_at":"2015-02-13T17:23:17Z","updated_at":"2015-02-13T17:23:18Z","closed_at":"2015-02-13T17:23:18Z","body":"Should add token to avoid XSRF to all json calls. This is fairly easy to avoid:\n\n1. Add token in page (class?)\n2. Prepend token at request id\n3. JSONServer: don't process requests with wrong token (session)\n4. ...\n5. Profit \n\n----------------------------------------\n- Bitbucket: https://bitbucket.org/christianbudde/cbweb/issue/19\n- Originally reported by: Christian Budde Christensen\n- Originally created at: 2013-10-21T14:31:35.824\n"},"comment":{"url":"https://api.github.com/repos/budde377/testPart/issues/comments/74290834","html_url":"https://github.com/budde377/testPart/issues/54#issuecomment-74290834","issue_url":"https://api.github.com/repos/budde377/testPart/issues/54","id":74290834,"user":{"login":"budde377","id":3490507,"avatar_url":"https://avatars.githubusercontent.com/u/3490507?v=3","gravatar_id":"","url":"https://api.github.com/users/budde377","html_url":"https://github.com/budde377","followers_url":"https://api.github.com/users/budde377/followers","following_url":"https://api.github.com/users/budde377/following{/other_user}","gists_url":"https://api.github.com/users/budde377/gists{/gist_id}","starred_url":"https://api.github.com/users/budde377/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/budde377/subscriptions","organizations_url":"https://api.github.com/users/budde377/orgs","repos_url":"https://api.github.com/users/budde377/repos","events_url":"https://api.github.com/users/budde377/events{/privacy}","received_events_url":"https://api.github.com/users/budde377/received_events","type":"User","site_admin":false},"created_at":"2015-02-13T17:23:18Z","updated_at":"2015-02-13T17:23:18Z","body":"Get token from user?\n\n----------------------------------------\nOriginal comment by: Christian Budde Christensen\n"}}