{"issue":{"title":"exploited XSS, via URL strings","user":{"login":"godDLL","id":132863,"url":"https://api.github.com/users/godDLL","avatar_url":"https://secure.gravatar.com/avatar/1b4ee62c50d32f238311ed2e24dbbebf?d=https://a248.e.akamai.net/assets.github.com%2Fimages%2Fgravatars%2Fgravatar-140.png","gravatar_id":"1b4ee62c50d32f238311ed2e24dbbebf"},"created_at":"2011-12-26T17:09:54Z","milestone":null,"labels":[],"state":"open","updated_at":"2011-12-26T17:13:29Z","id":2659042,"closed_at":null,"html_url":"https://github.com/maxcountryman/logmon/issues/1","pull_request":{"patch_url":null,"html_url":null,"diff_url":null},"body":"I left the demo window open for a bit, and got multiple javascript alerts as a result. \r\n\r\nhttps://gist.github.com/1521661\r\n","number":1,"url":"https://api.github.com/repos/maxcountryman/logmon/issues/1","comments":1,"assignee":null},"comment":{"user":{"login":"maxcountryman","id":74351,"url":"https://api.github.com/users/maxcountryman","avatar_url":"https://secure.gravatar.com/avatar/e2096369c53e9931ee9ce70bc4b26e5d?d=https://a248.e.akamai.net/assets.github.com%2Fimages%2Fgravatars%2Fgravatar-140.png","gravatar_id":"e2096369c53e9931ee9ce70bc4b26e5d"},"created_at":"2011-12-26T17:13:29Z","updated_at":"2011-12-26T17:13:29Z","id":3275624,"body":"I noticed this too. I'm not sure where it's not being escaped. Best guess is reading from the log isn't escaped so I'm running that as escaped on the server. Thanks!","url":"https://api.github.com/repos/maxcountryman/logmon/issues/comments/3275624"},"action":"created"}