{"action":"created","issue":{"url":"https://api.github.com/repos/mozilla/http-observatory/issues/215","repository_url":"https://api.github.com/repos/mozilla/http-observatory","labels_url":"https://api.github.com/repos/mozilla/http-observatory/issues/215/labels{/name}","comments_url":"https://api.github.com/repos/mozilla/http-observatory/issues/215/comments","events_url":"https://api.github.com/repos/mozilla/http-observatory/issues/215/events","html_url":"https://github.com/mozilla/http-observatory/issues/215","id":209269451,"number":215,"title":"\"Session cookie set without using the HttpOnly flag\"","user":{"login":"fipsofant","id":10834289,"avatar_url":"https://avatars.githubusercontent.com/u/10834289?v=3","gravatar_id":"","url":"https://api.github.com/users/fipsofant","html_url":"https://github.com/fipsofant","followers_url":"https://api.github.com/users/fipsofant/followers","following_url":"https://api.github.com/users/fipsofant/following{/other_user}","gists_url":"https://api.github.com/users/fipsofant/gists{/gist_id}","starred_url":"https://api.github.com/users/fipsofant/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/fipsofant/subscriptions","organizations_url":"https://api.github.com/users/fipsofant/orgs","repos_url":"https://api.github.com/users/fipsofant/repos","events_url":"https://api.github.com/users/fipsofant/events{/privacy}","received_events_url":"https://api.github.com/users/fipsofant/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":0,"created_at":"2017-02-21T20:54:06Z","updated_at":"2017-02-21T21:43:20Z","closed_at":null,"body":"Hi,\r\n\r\njust checked session cookies.\r\nGot: \"Session cookie set without using the HttpOnly flag\"\r\nBut Server Raw Header shows: \"Set-Cookie\tsecure; httponly\""},"comment":{"url":"https://api.github.com/repos/mozilla/http-observatory/issues/comments/281490811","html_url":"https://github.com/mozilla/http-observatory/issues/215#issuecomment-281490811","issue_url":"https://api.github.com/repos/mozilla/http-observatory/issues/215","id":281490811,"user":{"login":"floatingatoll","id":92684,"avatar_url":"https://avatars.githubusercontent.com/u/92684?v=3","gravatar_id":"","url":"https://api.github.com/users/floatingatoll","html_url":"https://github.com/floatingatoll","followers_url":"https://api.github.com/users/floatingatoll/followers","following_url":"https://api.github.com/users/floatingatoll/following{/other_user}","gists_url":"https://api.github.com/users/floatingatoll/gists{/gist_id}","starred_url":"https://api.github.com/users/floatingatoll/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/floatingatoll/subscriptions","organizations_url":"https://api.github.com/users/floatingatoll/orgs","repos_url":"https://api.github.com/users/floatingatoll/repos","events_url":"https://api.github.com/users/floatingatoll/events{/privacy}","received_events_url":"https://api.github.com/users/floatingatoll/received_events","type":"User","site_admin":false},"created_at":"2017-02-21T21:43:20Z","updated_at":"2017-02-21T21:43:20Z","body":"This is working out well for other sites, so there's likely some sort of RFC violation in the headers of the site you're checking.\r\n\r\nAre you permitted to share with us either a complete Set-Cookie value (copy-pasted from the results) or the hostname of the site you're scanning, so that we may further assist you?"}}
{"actor":{"display_login":"floatingatoll"}}