{"issue":{"created_at":"2011-06-29T00:07:01Z","state":"closed","updated_at":"2011-12-03T03:14:15Z","comments":8,"user":{"gravatar_id":"b6c1ebb35d0c41dfe0728dd0dc6ae5b1","id":124687,"url":"https://api.github.com/users/toolness","avatar_url":"https://secure.gravatar.com/avatar/b6c1ebb35d0c41dfe0728dd0dc6ae5b1?d=https://a248.e.akamai.net/assets.github.com%2Fimages%2Fgravatars%2Fgravatar-140.png","login":"toolness"},"body":"I wasn't sure whether I needed to do any fancy CSRF protection when I passed the assertion from the user's browser to my server, and Ben Adida said I should. We should probably mention this in the developer guide, no?\r\n","assignee":{"gravatar_id":"e7591fc2ef5b6733035b570ae7942b47","id":18057,"url":"https://api.github.com/users/benadida","avatar_url":"https://secure.gravatar.com/avatar/e7591fc2ef5b6733035b570ae7942b47?d=https://a248.e.akamai.net/assets.github.com%2Fimages%2Fgravatars%2Fgravatar-140.png","login":"benadida"},"id":1133995,"pull_request":{"patch_url":null,"html_url":null,"diff_url":null},"labels":[{"color":"3ca32c","name":"★★★","url":"https://api.github.com/repos/mozilla/browserid/labels/%E2%98%85%E2%98%85%E2%98%85"}],"number":41,"title":"Consider mentioning CSRF validation steps on the server-side","closed_at":"2011-11-29T19:52:00Z","html_url":"https://github.com/mozilla/browserid/issues/41","url":"https://api.github.com/repos/mozilla/browserid/issues/41","milestone":null},"action":"created","comment":{"created_at":"2011-12-03T03:14:15Z","updated_at":"2011-12-03T03:14:15Z","user":{"gravatar_id":"ef049ef74c1c0323b925195e7b7cc9e7","id":959649,"url":"https://api.github.com/users/jbonacci","avatar_url":"https://secure.gravatar.com/avatar/ef049ef74c1c0323b925195e7b7cc9e7?d=https://a248.e.akamai.net/assets.github.com%2Fimages%2Fgravatars%2Fgravatar-140.png","login":"jbonacci"},"body":"Catching up on older, closed issues with the Verified label.","id":2998781,"url":"https://api.github.com/repos/mozilla/browserid/issues/comments/2998781"}}