{"action":"created","issue":{"url":"https://api.github.com/repos/phetsims/chains/issues/3","repository_url":"https://api.github.com/repos/phetsims/chains","labels_url":"https://api.github.com/repos/phetsims/chains/issues/3/labels{/name}","comments_url":"https://api.github.com/repos/phetsims/chains/issues/3/comments","events_url":"https://api.github.com/repos/phetsims/chains/issues/3/events","html_url":"https://github.com/phetsims/chains/issues/3","id":219359849,"number":3,"title":"Sim is vulnerable to xss","user":{"login":"phet-steele","id":5863899,"avatar_url":"https://avatars1.githubusercontent.com/u/5863899?v=3","gravatar_id":"","url":"https://api.github.com/users/phet-steele","html_url":"https://github.com/phet-steele","followers_url":"https://api.github.com/users/phet-steele/followers","following_url":"https://api.github.com/users/phet-steele/following{/other_user}","gists_url":"https://api.github.com/users/phet-steele/gists{/gist_id}","starred_url":"https://api.github.com/users/phet-steele/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/phet-steele/subscriptions","organizations_url":"https://api.github.com/users/phet-steele/orgs","repos_url":"https://api.github.com/users/phet-steele/repos","events_url":"https://api.github.com/users/phet-steele/events{/privacy}","received_events_url":"https://api.github.com/users/phet-steele/received_events","type":"User","site_admin":false},"labels":[{"id":322194025,"url":"https://api.github.com/repos/phetsims/chains/labels/meeting:developer","name":"meeting:developer","color":"000000","default":false},{"id":406432091,"url":"https://api.github.com/repos/phetsims/chains/labels/type:automated-testing","name":"type:automated-testing","color":"FF00AA","default":false},{"id":165554502,"url":"https://api.github.com/repos/phetsims/chains/labels/type:bug","name":"type:bug","color":"FF00AA","default":false}],"state":"open","locked":false,"assignee":{"login":"jonathanolson","id":480878,"avatar_url":"https://avatars0.githubusercontent.com/u/480878?v=3","gravatar_id":"","url":"https://api.github.com/users/jonathanolson","html_url":"https://github.com/jonathanolson","followers_url":"https://api.github.com/users/jonathanolson/followers","following_url":"https://api.github.com/users/jonathanolson/following{/other_user}","gists_url":"https://api.github.com/users/jonathanolson/gists{/gist_id}","starred_url":"https://api.github.com/users/jonathanolson/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/jonathanolson/subscriptions","organizations_url":"https://api.github.com/users/jonathanolson/orgs","repos_url":"https://api.github.com/users/jonathanolson/repos","events_url":"https://api.github.com/users/jonathanolson/events{/privacy}","received_events_url":"https://api.github.com/users/jonathanolson/received_events","type":"User","site_admin":false},"assignees":[{"login":"jonathanolson","id":480878,"avatar_url":"https://avatars0.githubusercontent.com/u/480878?v=3","gravatar_id":"","url":"https://api.github.com/users/jonathanolson","html_url":"https://github.com/jonathanolson","followers_url":"https://api.github.com/users/jonathanolson/followers","following_url":"https://api.github.com/users/jonathanolson/following{/other_user}","gists_url":"https://api.github.com/users/jonathanolson/gists{/gist_id}","starred_url":"https://api.github.com/users/jonathanolson/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/jonathanolson/subscriptions","organizations_url":"https://api.github.com/users/jonathanolson/orgs","repos_url":"https://api.github.com/users/jonathanolson/repos","events_url":"https://api.github.com/users/jonathanolson/events{/privacy}","received_events_url":"https://api.github.com/users/jonathanolson/received_events","type":"User","site_admin":false}],"milestone":null,"comments":6,"created_at":"2017-04-04T19:37:45Z","updated_at":"2017-04-06T08:55:19Z","closed_at":null,"body":"Run the sim with `?stringTest=xss` to be redirected. Running on current master (4/4 1:30 PM)."},"comment":{"url":"https://api.github.com/repos/phetsims/chains/issues/comments/292111091","html_url":"https://github.com/phetsims/chains/issues/3#issuecomment-292111091","issue_url":"https://api.github.com/repos/phetsims/chains/issues/3","id":292111091,"user":{"login":"jonathanolson","id":480878,"avatar_url":"https://avatars0.githubusercontent.com/u/480878?v=3","gravatar_id":"","url":"https://api.github.com/users/jonathanolson","html_url":"https://github.com/jonathanolson","followers_url":"https://api.github.com/users/jonathanolson/followers","following_url":"https://api.github.com/users/jonathanolson/following{/other_user}","gists_url":"https://api.github.com/users/jonathanolson/gists{/gist_id}","starred_url":"https://api.github.com/users/jonathanolson/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/jonathanolson/subscriptions","organizations_url":"https://api.github.com/users/jonathanolson/orgs","repos_url":"https://api.github.com/users/jonathanolson/repos","events_url":"https://api.github.com/users/jonathanolson/events{/privacy}","received_events_url":"https://api.github.com/users/jonathanolson/received_events","type":"User","site_admin":false},"created_at":"2017-04-06T08:55:19Z","updated_at":"2017-04-06T08:55:19Z","body":"Documentation on RichText (for discussion during developer meeting):\r\n\r\nDisplays rich text with HTML-style tags by splitting it into multiple (child) Text nodes.\r\n\r\nIt should be a close to drop-in replacement for SubSupText, and supports the following markup and features:\r\n- `<b>` and `<strong>` for bold text\r\n- `<i>` and `<em>` for italic text\r\n- `<sub>` and `<sup>` for subscripts / superscripts\r\n- `<u>` for underlined text\r\n- `<s>` for strikethrough text\r\n- `<font>` tags with attributes color=\"cssString\", face=\"familyString\", size=\"cssSize\"\r\n- `<span>` tags with a dir=\"ltr\" / dir=\"rtl\" attribute\r\n- Unicode bidirectional marks (present in PhET strings) for full RTL support\r\n\r\nExamples from the scenery-phet demo:\r\n\r\n- `new RichText( 'RichText can have <b>bold</b> and <i>italic</i> text.' ),`\r\n- `new RichText( 'Can do H<sub>2</sub>O (A<sub>sub</sub> and A<sup>sup</sup>), or nesting: x<sup>2<sup>2</sup></sup>' ),`\r\n- `new RichText( 'Additionally: <font color=\"blue\">color</font>, <font size=\"30px\">sizes</font>, <font face=\"serif\">faces</font>, <s>strikethrough</s>, and <u>underline</u>' ),`\r\n- `new RichText( 'These <b><em>can</em> <u><font color=\"red\">be</font> mixed<sup>1</sup></u></b>.' ),`\r\n- `new RichText( '\\u202aHandles bidirectional text: \\u202b<font color=\"#0a0\">مقابض</font> النص ثنائي <b>الاتجاه</b><sub>2</sub>\\u202c\\u202c' )`\r\n"}}
{"actor":{"display_login":"jonathanolson"}}