hackerone-client 0.4.0 → 0.5.0

Sign up to get free protection for your applications and to get access to all the features.
Files changed (19) hide show
  1. checksums.yaml +4 -4
  2. data/CHANGELOG.md +4 -0
  3. data/CONTRIBUTING.md +44 -0
  4. data/fixtures/vcr_cassettes/assign_report_to_group.yml +230 -0
  5. data/fixtures/vcr_cassettes/assign_report_to_group_no_permission.yml +220 -0
  6. data/fixtures/vcr_cassettes/assign_report_to_nobody.yml +85 -0
  7. data/fixtures/vcr_cassettes/assign_report_to_nobody_no_permission.yml +75 -0
  8. data/fixtures/vcr_cassettes/assign_report_to_user.yml +230 -0
  9. data/fixtures/vcr_cassettes/assign_report_to_user_no_permission.yml +220 -0
  10. data/fixtures/vcr_cassettes/reporters.yml +2 -2
  11. data/fixtures/vcr_cassettes/server_error_when_assigning_report_to_user.yml +220 -0
  12. data/lib/hackerone/client.rb +3 -0
  13. data/lib/hackerone/client/group.rb +21 -0
  14. data/lib/hackerone/client/member.rb +29 -0
  15. data/lib/hackerone/client/program.rb +37 -0
  16. data/lib/hackerone/client/report.rb +34 -0
  17. data/lib/hackerone/client/user.rb +21 -0
  18. data/lib/hackerone/client/version.rb +1 -1
  19. metadata +14 -3
data/fixtures/vcr_cassettes/assign_report_to_nobody.yml ADDED
@@ -0,0 +1,85 @@
1
+ ---
2
+ http_interactions:
3
+ - request:
4
+ method: put
5
+ uri: https://api.hackerone.com/v1/reports/200/assignee
6
+ body:
7
+ encoding: UTF-8
8
+ string: '{"data":{"type":"nobody"}}'
9
+ headers:
10
+ Authorization:
11
+ - Basic c2pvcnM6cjNENlR0TDQrMDBMci9jTmxuaTF6cXFRVDZkbGx2c3F0RHVtTVlKZzNybz0=
12
+ User-Agent:
13
+ - Faraday v0.12.1
14
+ Content-Type:
15
+ - application/json
16
+ Accept-Encoding:
17
+ - gzip;q=1.0,deflate;q=0.6,identity;q=0.3
18
+ Accept:
19
+ - "*/*"
20
+ response:
21
+ status:
22
+ code: 200
23
+ message: OK
24
+ headers:
25
+ Date:
26
+ - Tue, 23 May 2017 20:40:17 GMT
27
+ Content-Type:
28
+ - application/json; charset=utf-8
29
+ Transfer-Encoding:
30
+ - chunked
31
+ Connection:
32
+ - keep-alive
33
+ Set-Cookie:
34
+ - __cfduid=d18b48f175f8a4d05a9f8d758b32312071495572015; expires=Wed, 23-May-18
35
+ 20:40:15 GMT; path=/; Domain=api.hackerone.com; HttpOnly
36
+ X-Request-Id:
37
+ - 20e7c0cf-f2c8-49a2-9d48-a7e390952f38
38
+ Etag:
39
+ - W/"52f122b88c201f16df319e12db04d1d8"
40
+ Cache-Control:
41
+ - max-age=0, private, must-revalidate
42
+ Strict-Transport-Security:
43
+ - max-age=31536000; includeSubDomains; preload
44
+ Content-Security-Policy:
45
+ - 'default-src ''none''; base-uri ''self''; block-all-mixed-content; child-src
46
+ www.youtube-nocookie.com; connect-src ''self'' www.google-analytics.com errors.hackerone.net;
47
+ font-src ''self''; form-action ''self''; frame-ancestors ''none''; img-src
48
+ ''self'' data: cover-photos.hackerone-user-content.com profile-photos.hackerone-user-content.com
49
+ hackerone-attachments.s3.amazonaws.com; media-src ''self'' hackerone-attachments.s3.amazonaws.com;
50
+ script-src ''self'' www.google-analytics.com; style-src ''self'' ''unsafe-inline'';
51
+ report-uri https://errors.hackerone.net/api/30/csp-report/?sentry_key=61c1e2f50d21487c97a071737701f598'
52
+ X-Content-Type-Options:
53
+ - nosniff
54
+ X-Download-Options:
55
+ - noopen
56
+ X-Frame-Options:
57
+ - DENY
58
+ X-Permitted-Cross-Domain-Policies:
59
+ - none
60
+ X-Xss-Protection:
61
+ - 1; mode=block
62
+ Public-Key-Pins-Report-Only:
63
+ - pin-sha256="WoiWRyIOVNa9ihaBciRSC7XHjliYS9VwUGOIud4PB18="; pin-sha256="r/mIkG3eEpVdm+u/ko/cwxzOMo1bk4TyHIlByibiA5E=";
64
+ pin-sha256="K87oWBWM9UZfyddvDfoxL+8lpNyoUB2ptGtn0fv6G2Q="; pin-sha256="iie1VXtL7HzAMF+/PVPR9xzT80kQxdZeJ+zduCB3uj0=";
65
+ pin-sha256="cGuxAXyFXFkWm61cF4HPWX8S0srS9j0aSqN0k4AP+4A="; pin-sha256="bIlWcjiKq1mftH/xd7Hw1JO77Cr+Gv+XYcGUQWwO+A4=";
66
+ pin-sha256="tXD+dGAP8rGY4PW1be90cOYEwg7pZ4G+yPZmIZWPTSg="; max-age=600; includeSubDomains;
67
+ report-uri="https://hackerone.report-uri.io/r/default/hpkp/reportOnly"
68
+ Server:
69
+ - cloudflare-nginx
70
+ Cf-Ray:
71
+ - 363ad44bf876731f-AMS
72
+ body:
73
+ encoding: ASCII-8BIT
74
+ string: '{"data":{"id":"200","type":"report","attributes":{"title":"Serious
75
+ stuff","state":"new","created_at":"2017-03-16T19:44:16.334Z","vulnerability_information":"plz
76
+ fix","triaged_at":null,"closed_at":null,"last_reporter_activity_at":"2017-03-16T19:44:30.927Z","first_program_activity_at":"2017-03-16T19:44:16.385Z","last_program_activity_at":"2017-03-16T19:44:30.927Z","bounty_awarded_at":null,"swag_awarded_at":null,"disclosed_at":null,"last_public_activity_at":"2017-03-16T19:44:30.927Z","last_activity_at":"2017-05-23T20:40:16.673Z"},"relationships":{"reporter":{"data":{"id":"147515","type":"user","attributes":{"username":"esjee","name":"esjee","disabled":false,"created_at":"2017-03-04T16:31:33.595Z","profile_picture":{"62x62":"/assets/avatars/default-71a302d706457f3d3a31eb30fa3e73e6cf0b1d677b8fa218eaeaffd67ae97918.png","82x82":"/assets/avatars/default-71a302d706457f3d3a31eb30fa3e73e6cf0b1d677b8fa218eaeaffd67ae97918.png","110x110":"/assets/avatars/default-71a302d706457f3d3a31eb30fa3e73e6cf0b1d677b8fa218eaeaffd67ae97918.png","260x260":"/assets/avatars/default-71a302d706457f3d3a31eb30fa3e73e6cf0b1d677b8fa218eaeaffd67ae97918.png"}}}},"program":{"data":{"id":"18969","type":"program","attributes":{"handle":"github","created_at":"2017-03-08T19:22:41.884Z","updated_at":"2017-04-09T08:15:15.228Z"}}},"severity":{"data":{"id":"31671","type":"severity","attributes":{"rating":"high","author_type":"User","user_id":147515,"created_at":"2017-03-16T19:44:16.371Z"}}},"swag":{"data":[]},"attachments":{"data":[]},"vulnerability_types":{"data":[{"id":"249255","type":"vulnerability-type","attributes":{"name":"Cross-Site
77
+ Scripting (XSS)","description":"Failure of a site to validate, filter, or
78
+ encode user input before returning it to another user''s web client.\n","created_at":"2017-03-08T19:22:43.582Z"}}]},"weakness":{"data":{"id":"60","type":"weakness","attributes":{"name":"Cross-site
79
+ Scripting (XSS) - Generic","description":"The software does not neutralize
80
+ or incorrectly neutralizes user-controllable input before it is placed in
81
+ output that is used as a web page that is served to other users.","created_at":"2017-01-05T01:51:19.000Z"}}},"activities":{"data":[{"type":"activity-nobody-assigned-to-bug","id":"1696140","attributes":{"message":null,"created_at":"2017-05-23T20:40:16.673Z","updated_at":"2017-05-23T20:40:16.673Z","internal":true},"relationships":{"actor":{"data":{"type":"user","id":"170310","attributes":{"username":"esjee","name":null,"disabled":false,"created_at":"2017-05-23T20:19:30.805Z","profile_picture":{"62x62":"/assets/avatars/default-71a302d706457f3d3a31eb30fa3e73e6cf0b1d677b8fa218eaeaffd67ae97918.png","82x82":"/assets/avatars/default-71a302d706457f3d3a31eb30fa3e73e6cf0b1d677b8fa218eaeaffd67ae97918.png","110x110":"/assets/avatars/default-71a302d706457f3d3a31eb30fa3e73e6cf0b1d677b8fa218eaeaffd67ae97918.png","260x260":"/assets/avatars/default-71a302d706457f3d3a31eb30fa3e73e6cf0b1d677b8fa218eaeaffd67ae97918.png"}}}}}},{"type":"activity-group-assigned-to-bug","id":"1696134","attributes":{"message":null,"created_at":"2017-05-23T20:38:52.353Z","updated_at":"2017-05-23T20:38:52.353Z","internal":true},"relationships":{"actor":{"data":{"type":"user","id":"170310","attributes":{"username":"esjee","name":null,"disabled":false,"created_at":"2017-05-23T20:19:30.805Z","profile_picture":{"62x62":"/assets/avatars/default-71a302d706457f3d3a31eb30fa3e73e6cf0b1d677b8fa218eaeaffd67ae97918.png","82x82":"/assets/avatars/default-71a302d706457f3d3a31eb30fa3e73e6cf0b1d677b8fa218eaeaffd67ae97918.png","110x110":"/assets/avatars/default-71a302d706457f3d3a31eb30fa3e73e6cf0b1d677b8fa218eaeaffd67ae97918.png","260x260":"/assets/avatars/default-71a302d706457f3d3a31eb30fa3e73e6cf0b1d677b8fa218eaeaffd67ae97918.png"}}}},"group":{"data":{"id":"23578","type":"group","attributes":{"name":"Admin","created_at":"2017-03-08T19:22:43.243Z","permissions":["user_management","program_management"]}}}}},{"type":"activity-user-assigned-to-bug","id":"1696130","attributes":{"message":null,"created_at":"2017-05-23T20:38:18.851Z","updated_at":"2017-05-23T20:38:18.851Z","internal":true},"relationships":{"actor":{"data":{"type":"user","id":"170310","attributes":{"username":"esjee","name":null,"disabled":false,"created_at":"2017-05-23T20:19:30.805Z","profile_picture":{"62x62":"/assets/avatars/default-71a302d706457f3d3a31eb30fa3e73e6cf0b1d677b8fa218eaeaffd67ae97918.png","82x82":"/assets/avatars/default-71a302d706457f3d3a31eb30fa3e73e6cf0b1d677b8fa218eaeaffd67ae97918.png","110x110":"/assets/avatars/default-71a302d706457f3d3a31eb30fa3e73e6cf0b1d677b8fa218eaeaffd67ae97918.png","260x260":"/assets/avatars/default-71a302d706457f3d3a31eb30fa3e73e6cf0b1d677b8fa218eaeaffd67ae97918.png"}}}},"assigned_user":{"data":{"id":"147515","type":"user","attributes":{"username":"esjee","name":"esjee","disabled":false,"created_at":"2017-03-04T16:31:33.595Z","profile_picture":{"62x62":"/assets/avatars/default-71a302d706457f3d3a31eb30fa3e73e6cf0b1d677b8fa218eaeaffd67ae97918.png","82x82":"/assets/avatars/default-71a302d706457f3d3a31eb30fa3e73e6cf0b1d677b8fa218eaeaffd67ae97918.png","110x110":"/assets/avatars/default-71a302d706457f3d3a31eb30fa3e73e6cf0b1d677b8fa218eaeaffd67ae97918.png","260x260":"/assets/avatars/default-71a302d706457f3d3a31eb30fa3e73e6cf0b1d677b8fa218eaeaffd67ae97918.png"}}}}}},{"type":"activity-nobody-assigned-to-bug","id":"1696106","attributes":{"message":null,"created_at":"2017-05-23T20:32:57.765Z","updated_at":"2017-05-23T20:32:57.765Z","internal":true},"relationships":{"actor":{"data":{"type":"user","id":"170310","attributes":{"username":"esjee","name":null,"disabled":false,"created_at":"2017-05-23T20:19:30.805Z","profile_picture":{"62x62":"/assets/avatars/default-71a302d706457f3d3a31eb30fa3e73e6cf0b1d677b8fa218eaeaffd67ae97918.png","82x82":"/assets/avatars/default-71a302d706457f3d3a31eb30fa3e73e6cf0b1d677b8fa218eaeaffd67ae97918.png","110x110":"/assets/avatars/default-71a302d706457f3d3a31eb30fa3e73e6cf0b1d677b8fa218eaeaffd67ae97918.png","260x260":"/assets/avatars/default-71a302d706457f3d3a31eb30fa3e73e6cf0b1d677b8fa218eaeaffd67ae97918.png"}}}}}},{"type":"activity-group-assigned-to-bug","id":"1696105","attributes":{"message":null,"created_at":"2017-05-23T20:32:55.460Z","updated_at":"2017-05-23T20:32:55.460Z","internal":true},"relationships":{"actor":{"data":{"type":"user","id":"170310","attributes":{"username":"esjee","name":null,"disabled":false,"created_at":"2017-05-23T20:19:30.805Z","profile_picture":{"62x62":"/assets/avatars/default-71a302d706457f3d3a31eb30fa3e73e6cf0b1d677b8fa218eaeaffd67ae97918.png","82x82":"/assets/avatars/default-71a302d706457f3d3a31eb30fa3e73e6cf0b1d677b8fa218eaeaffd67ae97918.png","110x110":"/assets/avatars/default-71a302d706457f3d3a31eb30fa3e73e6cf0b1d677b8fa218eaeaffd67ae97918.png","260x260":"/assets/avatars/default-71a302d706457f3d3a31eb30fa3e73e6cf0b1d677b8fa218eaeaffd67ae97918.png"}}}},"group":{"data":{"id":"23578","type":"group","attributes":{"name":"Admin","created_at":"2017-03-08T19:22:43.243Z","permissions":["user_management","program_management"]}}}}},{"type":"activity-user-assigned-to-bug","id":"1696104","attributes":{"message":null,"created_at":"2017-05-23T20:32:54.570Z","updated_at":"2017-05-23T20:32:54.570Z","internal":true},"relationships":{"actor":{"data":{"type":"user","id":"170310","attributes":{"username":"esjee","name":null,"disabled":false,"created_at":"2017-05-23T20:19:30.805Z","profile_picture":{"62x62":"/assets/avatars/default-71a302d706457f3d3a31eb30fa3e73e6cf0b1d677b8fa218eaeaffd67ae97918.png","82x82":"/assets/avatars/default-71a302d706457f3d3a31eb30fa3e73e6cf0b1d677b8fa218eaeaffd67ae97918.png","110x110":"/assets/avatars/default-71a302d706457f3d3a31eb30fa3e73e6cf0b1d677b8fa218eaeaffd67ae97918.png","260x260":"/assets/avatars/default-71a302d706457f3d3a31eb30fa3e73e6cf0b1d677b8fa218eaeaffd67ae97918.png"}}}},"assigned_user":{"data":{"id":"147515","type":"user","attributes":{"username":"esjee","name":"esjee","disabled":false,"created_at":"2017-03-04T16:31:33.595Z","profile_picture":{"62x62":"/assets/avatars/default-71a302d706457f3d3a31eb30fa3e73e6cf0b1d677b8fa218eaeaffd67ae97918.png","82x82":"/assets/avatars/default-71a302d706457f3d3a31eb30fa3e73e6cf0b1d677b8fa218eaeaffd67ae97918.png","110x110":"/assets/avatars/default-71a302d706457f3d3a31eb30fa3e73e6cf0b1d677b8fa218eaeaffd67ae97918.png","260x260":"/assets/avatars/default-71a302d706457f3d3a31eb30fa3e73e6cf0b1d677b8fa218eaeaffd67ae97918.png"}}}}}},{"type":"activity-nobody-assigned-to-bug","id":"1696093","attributes":{"message":null,"created_at":"2017-05-23T20:31:17.683Z","updated_at":"2017-05-23T20:31:17.683Z","internal":true},"relationships":{"actor":{"data":{"type":"user","id":"170310","attributes":{"username":"esjee","name":null,"disabled":false,"created_at":"2017-05-23T20:19:30.805Z","profile_picture":{"62x62":"/assets/avatars/default-71a302d706457f3d3a31eb30fa3e73e6cf0b1d677b8fa218eaeaffd67ae97918.png","82x82":"/assets/avatars/default-71a302d706457f3d3a31eb30fa3e73e6cf0b1d677b8fa218eaeaffd67ae97918.png","110x110":"/assets/avatars/default-71a302d706457f3d3a31eb30fa3e73e6cf0b1d677b8fa218eaeaffd67ae97918.png","260x260":"/assets/avatars/default-71a302d706457f3d3a31eb30fa3e73e6cf0b1d677b8fa218eaeaffd67ae97918.png"}}}}}},{"type":"activity-nobody-assigned-to-bug","id":"1696068","attributes":{"message":null,"created_at":"2017-05-23T20:22:49.781Z","updated_at":"2017-05-23T20:22:49.781Z","internal":true},"relationships":{"actor":{"data":{"type":"user","id":"170310","attributes":{"username":"esjee","name":null,"disabled":false,"created_at":"2017-05-23T20:19:30.805Z","profile_picture":{"62x62":"/assets/avatars/default-71a302d706457f3d3a31eb30fa3e73e6cf0b1d677b8fa218eaeaffd67ae97918.png","82x82":"/assets/avatars/default-71a302d706457f3d3a31eb30fa3e73e6cf0b1d677b8fa218eaeaffd67ae97918.png","110x110":"/assets/avatars/default-71a302d706457f3d3a31eb30fa3e73e6cf0b1d677b8fa218eaeaffd67ae97918.png","260x260":"/assets/avatars/default-71a302d706457f3d3a31eb30fa3e73e6cf0b1d677b8fa218eaeaffd67ae97918.png"}}}}}},{"type":"activity-group-assigned-to-bug","id":"1696061","attributes":{"message":null,"created_at":"2017-05-23T20:21:32.579Z","updated_at":"2017-05-23T20:21:32.579Z","internal":true},"relationships":{"actor":{"data":{"type":"user","id":"170310","attributes":{"username":"esjee","name":null,"disabled":false,"created_at":"2017-05-23T20:19:30.805Z","profile_picture":{"62x62":"/assets/avatars/default-71a302d706457f3d3a31eb30fa3e73e6cf0b1d677b8fa218eaeaffd67ae97918.png","82x82":"/assets/avatars/default-71a302d706457f3d3a31eb30fa3e73e6cf0b1d677b8fa218eaeaffd67ae97918.png","110x110":"/assets/avatars/default-71a302d706457f3d3a31eb30fa3e73e6cf0b1d677b8fa218eaeaffd67ae97918.png","260x260":"/assets/avatars/default-71a302d706457f3d3a31eb30fa3e73e6cf0b1d677b8fa218eaeaffd67ae97918.png"}}}},"group":{"data":{"id":"23579","type":"group","attributes":{"name":"Standard","created_at":"2017-03-08T19:22:43.259Z","permissions":["report_management","reward_management"]}}}}},{"type":"activity-user-assigned-to-bug","id":"1696058","attributes":{"message":null,"created_at":"2017-05-23T20:21:22.192Z","updated_at":"2017-05-23T20:21:22.192Z","internal":true},"relationships":{"actor":{"data":{"type":"user","id":"170310","attributes":{"username":"esjee","name":null,"disabled":false,"created_at":"2017-05-23T20:19:30.805Z","profile_picture":{"62x62":"/assets/avatars/default-71a302d706457f3d3a31eb30fa3e73e6cf0b1d677b8fa218eaeaffd67ae97918.png","82x82":"/assets/avatars/default-71a302d706457f3d3a31eb30fa3e73e6cf0b1d677b8fa218eaeaffd67ae97918.png","110x110":"/assets/avatars/default-71a302d706457f3d3a31eb30fa3e73e6cf0b1d677b8fa218eaeaffd67ae97918.png","260x260":"/assets/avatars/default-71a302d706457f3d3a31eb30fa3e73e6cf0b1d677b8fa218eaeaffd67ae97918.png"}}}},"assigned_user":{"data":{"id":"147515","type":"user","attributes":{"username":"esjee","name":"esjee","disabled":false,"created_at":"2017-03-04T16:31:33.595Z","profile_picture":{"62x62":"/assets/avatars/default-71a302d706457f3d3a31eb30fa3e73e6cf0b1d677b8fa218eaeaffd67ae97918.png","82x82":"/assets/avatars/default-71a302d706457f3d3a31eb30fa3e73e6cf0b1d677b8fa218eaeaffd67ae97918.png","110x110":"/assets/avatars/default-71a302d706457f3d3a31eb30fa3e73e6cf0b1d677b8fa218eaeaffd67ae97918.png","260x260":"/assets/avatars/default-71a302d706457f3d3a31eb30fa3e73e6cf0b1d677b8fa218eaeaffd67ae97918.png"}}}}}},{"type":"activity-nobody-assigned-to-bug","id":"1675616","attributes":{"message":null,"created_at":"2017-05-15T20:25:30.334Z","updated_at":"2017-05-15T20:25:30.334Z","internal":true},"relationships":{"actor":{"data":{"type":"user","id":"160844","attributes":{"username":"api_o02mvnt8nty324wn0w5al","name":"","disabled":true,"created_at":"2017-04-20T19:25:29.165Z","profile_picture":{"62x62":"/assets/avatars/default-71a302d706457f3d3a31eb30fa3e73e6cf0b1d677b8fa218eaeaffd67ae97918.png","82x82":"/assets/avatars/default-71a302d706457f3d3a31eb30fa3e73e6cf0b1d677b8fa218eaeaffd67ae97918.png","110x110":"/assets/avatars/default-71a302d706457f3d3a31eb30fa3e73e6cf0b1d677b8fa218eaeaffd67ae97918.png","260x260":"/assets/avatars/default-71a302d706457f3d3a31eb30fa3e73e6cf0b1d677b8fa218eaeaffd67ae97918.png"}}}}}},{"type":"activity-group-assigned-to-bug","id":"1675604","attributes":{"message":null,"created_at":"2017-05-15T20:21:26.628Z","updated_at":"2017-05-15T20:21:26.628Z","internal":true},"relationships":{"actor":{"data":{"type":"user","id":"160844","attributes":{"username":"api_o02mvnt8nty324wn0w5al","name":"","disabled":true,"created_at":"2017-04-20T19:25:29.165Z","profile_picture":{"62x62":"/assets/avatars/default-71a302d706457f3d3a31eb30fa3e73e6cf0b1d677b8fa218eaeaffd67ae97918.png","82x82":"/assets/avatars/default-71a302d706457f3d3a31eb30fa3e73e6cf0b1d677b8fa218eaeaffd67ae97918.png","110x110":"/assets/avatars/default-71a302d706457f3d3a31eb30fa3e73e6cf0b1d677b8fa218eaeaffd67ae97918.png","260x260":"/assets/avatars/default-71a302d706457f3d3a31eb30fa3e73e6cf0b1d677b8fa218eaeaffd67ae97918.png"}}}},"group":{"data":{"id":"23578","type":"group","attributes":{"name":"Admin","created_at":"2017-03-08T19:22:43.243Z","permissions":["user_management","program_management"]}}}}},{"type":"activity-nobody-assigned-to-bug","id":"1675418","attributes":{"message":null,"created_at":"2017-05-15T19:16:39.244Z","updated_at":"2017-05-15T19:16:39.244Z","internal":true},"relationships":{"actor":{"data":{"type":"user","id":"160844","attributes":{"username":"api_o02mvnt8nty324wn0w5al","name":"","disabled":true,"created_at":"2017-04-20T19:25:29.165Z","profile_picture":{"62x62":"/assets/avatars/default-71a302d706457f3d3a31eb30fa3e73e6cf0b1d677b8fa218eaeaffd67ae97918.png","82x82":"/assets/avatars/default-71a302d706457f3d3a31eb30fa3e73e6cf0b1d677b8fa218eaeaffd67ae97918.png","110x110":"/assets/avatars/default-71a302d706457f3d3a31eb30fa3e73e6cf0b1d677b8fa218eaeaffd67ae97918.png","260x260":"/assets/avatars/default-71a302d706457f3d3a31eb30fa3e73e6cf0b1d677b8fa218eaeaffd67ae97918.png"}}}}}},{"type":"activity-nobody-assigned-to-bug","id":"1675409","attributes":{"message":null,"created_at":"2017-05-15T19:14:03.281Z","updated_at":"2017-05-15T19:14:03.281Z","internal":true},"relationships":{"actor":{"data":{"type":"user","id":"160844","attributes":{"username":"api_o02mvnt8nty324wn0w5al","name":"","disabled":true,"created_at":"2017-04-20T19:25:29.165Z","profile_picture":{"62x62":"/assets/avatars/default-71a302d706457f3d3a31eb30fa3e73e6cf0b1d677b8fa218eaeaffd67ae97918.png","82x82":"/assets/avatars/default-71a302d706457f3d3a31eb30fa3e73e6cf0b1d677b8fa218eaeaffd67ae97918.png","110x110":"/assets/avatars/default-71a302d706457f3d3a31eb30fa3e73e6cf0b1d677b8fa218eaeaffd67ae97918.png","260x260":"/assets/avatars/default-71a302d706457f3d3a31eb30fa3e73e6cf0b1d677b8fa218eaeaffd67ae97918.png"}}}}}},{"type":"activity-nobody-assigned-to-bug","id":"1675324","attributes":{"message":null,"created_at":"2017-05-15T18:56:31.322Z","updated_at":"2017-05-15T18:56:31.322Z","internal":true},"relationships":{"actor":{"data":{"type":"user","id":"160844","attributes":{"username":"api_o02mvnt8nty324wn0w5al","name":"","disabled":true,"created_at":"2017-04-20T19:25:29.165Z","profile_picture":{"62x62":"/assets/avatars/default-71a302d706457f3d3a31eb30fa3e73e6cf0b1d677b8fa218eaeaffd67ae97918.png","82x82":"/assets/avatars/default-71a302d706457f3d3a31eb30fa3e73e6cf0b1d677b8fa218eaeaffd67ae97918.png","110x110":"/assets/avatars/default-71a302d706457f3d3a31eb30fa3e73e6cf0b1d677b8fa218eaeaffd67ae97918.png","260x260":"/assets/avatars/default-71a302d706457f3d3a31eb30fa3e73e6cf0b1d677b8fa218eaeaffd67ae97918.png"}}}}}},{"type":"activity-group-assigned-to-bug","id":"1675321","attributes":{"message":null,"created_at":"2017-05-15T18:55:34.311Z","updated_at":"2017-05-15T18:55:34.311Z","internal":true},"relationships":{"actor":{"data":{"type":"user","id":"160844","attributes":{"username":"api_o02mvnt8nty324wn0w5al","name":"","disabled":true,"created_at":"2017-04-20T19:25:29.165Z","profile_picture":{"62x62":"/assets/avatars/default-71a302d706457f3d3a31eb30fa3e73e6cf0b1d677b8fa218eaeaffd67ae97918.png","82x82":"/assets/avatars/default-71a302d706457f3d3a31eb30fa3e73e6cf0b1d677b8fa218eaeaffd67ae97918.png","110x110":"/assets/avatars/default-71a302d706457f3d3a31eb30fa3e73e6cf0b1d677b8fa218eaeaffd67ae97918.png","260x260":"/assets/avatars/default-71a302d706457f3d3a31eb30fa3e73e6cf0b1d677b8fa218eaeaffd67ae97918.png"}}}},"group":{"data":{"id":"23578","type":"group","attributes":{"name":"Admin","created_at":"2017-03-08T19:22:43.243Z","permissions":["user_management","program_management"]}}}}},{"type":"activity-group-assigned-to-bug","id":"1675310","attributes":{"message":null,"created_at":"2017-05-15T18:52:38.454Z","updated_at":"2017-05-15T18:52:38.454Z","internal":true},"relationships":{"actor":{"data":{"type":"user","id":"160844","attributes":{"username":"api_o02mvnt8nty324wn0w5al","name":"","disabled":true,"created_at":"2017-04-20T19:25:29.165Z","profile_picture":{"62x62":"/assets/avatars/default-71a302d706457f3d3a31eb30fa3e73e6cf0b1d677b8fa218eaeaffd67ae97918.png","82x82":"/assets/avatars/default-71a302d706457f3d3a31eb30fa3e73e6cf0b1d677b8fa218eaeaffd67ae97918.png","110x110":"/assets/avatars/default-71a302d706457f3d3a31eb30fa3e73e6cf0b1d677b8fa218eaeaffd67ae97918.png","260x260":"/assets/avatars/default-71a302d706457f3d3a31eb30fa3e73e6cf0b1d677b8fa218eaeaffd67ae97918.png"}}}},"group":{"data":{"id":"23578","type":"group","attributes":{"name":"Admin","created_at":"2017-03-08T19:22:43.243Z","permissions":["user_management","program_management"]}}}}},{"type":"activity-group-assigned-to-bug","id":"1675302","attributes":{"message":null,"created_at":"2017-05-15T18:51:19.929Z","updated_at":"2017-05-15T18:51:19.929Z","internal":true},"relationships":{"actor":{"data":{"type":"user","id":"160844","attributes":{"username":"api_o02mvnt8nty324wn0w5al","name":"","disabled":true,"created_at":"2017-04-20T19:25:29.165Z","profile_picture":{"62x62":"/assets/avatars/default-71a302d706457f3d3a31eb30fa3e73e6cf0b1d677b8fa218eaeaffd67ae97918.png","82x82":"/assets/avatars/default-71a302d706457f3d3a31eb30fa3e73e6cf0b1d677b8fa218eaeaffd67ae97918.png","110x110":"/assets/avatars/default-71a302d706457f3d3a31eb30fa3e73e6cf0b1d677b8fa218eaeaffd67ae97918.png","260x260":"/assets/avatars/default-71a302d706457f3d3a31eb30fa3e73e6cf0b1d677b8fa218eaeaffd67ae97918.png"}}}},"group":{"data":{"id":"23578","type":"group","attributes":{"name":"Admin","created_at":"2017-03-08T19:22:43.243Z","permissions":["user_management","program_management"]}}}}},{"type":"activity-comment","id":"1546353","attributes":{"message":"no
82
+ fix?","created_at":"2017-03-16T19:44:30.927Z","updated_at":"2017-03-16T19:44:30.927Z","internal":false},"relationships":{"actor":{"data":{"type":"user","id":"147515","attributes":{"username":"esjee","name":"esjee","disabled":false,"created_at":"2017-03-04T16:31:33.595Z","profile_picture":{"62x62":"/assets/avatars/default-71a302d706457f3d3a31eb30fa3e73e6cf0b1d677b8fa218eaeaffd67ae97918.png","82x82":"/assets/avatars/default-71a302d706457f3d3a31eb30fa3e73e6cf0b1d677b8fa218eaeaffd67ae97918.png","110x110":"/assets/avatars/default-71a302d706457f3d3a31eb30fa3e73e6cf0b1d677b8fa218eaeaffd67ae97918.png","260x260":"/assets/avatars/default-71a302d706457f3d3a31eb30fa3e73e6cf0b1d677b8fa218eaeaffd67ae97918.png"}}}}}}]},"bounties":{"data":[]},"summaries":{"data":[]}}}}'
83
+ http_version:
84
+ recorded_at: Tue, 23 May 2017 20:39:37 GMT
85
+ recorded_with: VCR 3.0.3
data/fixtures/vcr_cassettes/assign_report_to_nobody_no_permission.yml ADDED
@@ -0,0 +1,75 @@
1
+ ---
2
+ http_interactions:
3
+ - request:
4
+ method: put
5
+ uri: https://api.hackerone.com/v1/reports/200/assignee
6
+ body:
7
+ encoding: UTF-8
8
+ string: '{"data":{"type":"nobody"}}'
9
+ headers:
10
+ Authorization:
11
+ - Basic c2pvcnM6cjNENlR0TDQrMDBMci9jTmxuaTF6cXFRVDZkbGx2c3F0RHVtTVlKZzNybz0=
12
+ User-Agent:
13
+ - Faraday v0.12.1
14
+ Content-Type:
15
+ - application/json
16
+ Accept-Encoding:
17
+ - gzip;q=1.0,deflate;q=0.6,identity;q=0.3
18
+ Accept:
19
+ - "*/*"
20
+ response:
21
+ status:
22
+ code: 403
23
+ message: Forbidden
24
+ headers:
25
+ Date:
26
+ - Tue, 23 May 2017 20:41:46 GMT
27
+ Content-Type:
28
+ - application/json; charset=utf-8
29
+ Transfer-Encoding:
30
+ - chunked
31
+ Connection:
32
+ - keep-alive
33
+ Set-Cookie:
34
+ - __cfduid=d8861410574354af8a263a2ebe8e96a8c1495572106; expires=Wed, 23-May-18
35
+ 20:41:46 GMT; path=/; Domain=api.hackerone.com; HttpOnly
36
+ X-Request-Id:
37
+ - 8ad6c63f-b787-44cc-bffc-eab353a5b56e
38
+ Cache-Control:
39
+ - no-cache
40
+ Strict-Transport-Security:
41
+ - max-age=31536000; includeSubDomains; preload
42
+ Content-Security-Policy:
43
+ - 'default-src ''none''; base-uri ''self''; block-all-mixed-content; child-src
44
+ www.youtube-nocookie.com; connect-src ''self'' www.google-analytics.com errors.hackerone.net;
45
+ font-src ''self''; form-action ''self''; frame-ancestors ''none''; img-src
46
+ ''self'' data: cover-photos.hackerone-user-content.com profile-photos.hackerone-user-content.com
47
+ hackerone-attachments.s3.amazonaws.com; media-src ''self'' hackerone-attachments.s3.amazonaws.com;
48
+ script-src ''self'' www.google-analytics.com; style-src ''self'' ''unsafe-inline'';
49
+ report-uri https://errors.hackerone.net/api/30/csp-report/?sentry_key=61c1e2f50d21487c97a071737701f598'
50
+ X-Content-Type-Options:
51
+ - nosniff
52
+ X-Download-Options:
53
+ - noopen
54
+ X-Frame-Options:
55
+ - DENY
56
+ X-Permitted-Cross-Domain-Policies:
57
+ - none
58
+ X-Xss-Protection:
59
+ - 1; mode=block
60
+ Public-Key-Pins-Report-Only:
61
+ - pin-sha256="WoiWRyIOVNa9ihaBciRSC7XHjliYS9VwUGOIud4PB18="; pin-sha256="r/mIkG3eEpVdm+u/ko/cwxzOMo1bk4TyHIlByibiA5E=";
62
+ pin-sha256="K87oWBWM9UZfyddvDfoxL+8lpNyoUB2ptGtn0fv6G2Q="; pin-sha256="iie1VXtL7HzAMF+/PVPR9xzT80kQxdZeJ+zduCB3uj0=";
63
+ pin-sha256="cGuxAXyFXFkWm61cF4HPWX8S0srS9j0aSqN0k4AP+4A="; pin-sha256="bIlWcjiKq1mftH/xd7Hw1JO77Cr+Gv+XYcGUQWwO+A4=";
64
+ pin-sha256="tXD+dGAP8rGY4PW1be90cOYEwg7pZ4G+yPZmIZWPTSg="; max-age=600; includeSubDomains;
65
+ report-uri="https://hackerone.report-uri.io/r/default/hpkp/reportOnly"
66
+ Server:
67
+ - cloudflare-nginx
68
+ Cf-Ray:
69
+ - 363ad67eabde7325-AMS
70
+ body:
71
+ encoding: ASCII-8BIT
72
+ string: '{"errors":[{"status":403}]}'
73
+ http_version:
74
+ recorded_at: Tue, 23 May 2017 20:41:07 GMT
75
+ recorded_with: VCR 3.0.3
data/fixtures/vcr_cassettes/assign_report_to_user.yml ADDED
@@ -0,0 +1,230 @@
1
+ ---
2
+ http_interactions:
3
+ - request:
4
+ method: get
5
+ uri: https://api.hackerone.com/v1/me/programs
6
+ body:
7
+ encoding: US-ASCII
8
+ string: ''
9
+ headers:
10
+ Authorization:
11
+ - Basic c2pvcnM6cjNENlR0TDQrMDBMci9jTmxuaTF6cXFRVDZkbGx2c3F0RHVtTVlKZzNybz0=
12
+ User-Agent:
13
+ - Faraday v0.12.1
14
+ Accept-Encoding:
15
+ - gzip;q=1.0,deflate;q=0.6,identity;q=0.3
16
+ Accept:
17
+ - "*/*"
18
+ response:
19
+ status:
20
+ code: 200
21
+ message: OK
22
+ headers:
23
+ Date:
24
+ - Tue, 23 May 2017 20:38:17 GMT
25
+ Content-Type:
26
+ - application/json; charset=utf-8
27
+ Transfer-Encoding:
28
+ - chunked
29
+ Connection:
30
+ - keep-alive
31
+ Set-Cookie:
32
+ - __cfduid=d2b8b7e384a9c4dc463282bbbd01976b01495571896; expires=Wed, 23-May-18
33
+ 20:38:16 GMT; path=/; Domain=api.hackerone.com; HttpOnly
34
+ X-Request-Id:
35
+ - 03a1f5d2-97e5-4ab7-91fd-8c95cf3b68c7
36
+ Etag:
37
+ - W/"9329ef6b8f370e76d96d71977a6480c4"
38
+ Cache-Control:
39
+ - max-age=0, private, must-revalidate
40
+ Strict-Transport-Security:
41
+ - max-age=31536000; includeSubDomains; preload
42
+ Content-Security-Policy:
43
+ - 'default-src ''none''; base-uri ''self''; block-all-mixed-content; child-src
44
+ www.youtube-nocookie.com; connect-src ''self'' www.google-analytics.com errors.hackerone.net;
45
+ font-src ''self''; form-action ''self''; frame-ancestors ''none''; img-src
46
+ ''self'' data: cover-photos.hackerone-user-content.com profile-photos.hackerone-user-content.com
47
+ hackerone-attachments.s3.amazonaws.com; media-src ''self'' hackerone-attachments.s3.amazonaws.com;
48
+ script-src ''self'' www.google-analytics.com; style-src ''self'' ''unsafe-inline'';
49
+ report-uri https://errors.hackerone.net/api/30/csp-report/?sentry_key=61c1e2f50d21487c97a071737701f598'
50
+ X-Content-Type-Options:
51
+ - nosniff
52
+ X-Download-Options:
53
+ - noopen
54
+ X-Frame-Options:
55
+ - DENY
56
+ X-Permitted-Cross-Domain-Policies:
57
+ - none
58
+ X-Xss-Protection:
59
+ - 1; mode=block
60
+ Public-Key-Pins-Report-Only:
61
+ - pin-sha256="WoiWRyIOVNa9ihaBciRSC7XHjliYS9VwUGOIud4PB18="; pin-sha256="r/mIkG3eEpVdm+u/ko/cwxzOMo1bk4TyHIlByibiA5E=";
62
+ pin-sha256="K87oWBWM9UZfyddvDfoxL+8lpNyoUB2ptGtn0fv6G2Q="; pin-sha256="iie1VXtL7HzAMF+/PVPR9xzT80kQxdZeJ+zduCB3uj0=";
63
+ pin-sha256="cGuxAXyFXFkWm61cF4HPWX8S0srS9j0aSqN0k4AP+4A="; pin-sha256="bIlWcjiKq1mftH/xd7Hw1JO77Cr+Gv+XYcGUQWwO+A4=";
64
+ pin-sha256="tXD+dGAP8rGY4PW1be90cOYEwg7pZ4G+yPZmIZWPTSg="; max-age=600; includeSubDomains;
65
+ report-uri="https://hackerone.report-uri.io/r/default/hpkp/reportOnly"
66
+ Server:
67
+ - cloudflare-nginx
68
+ Cf-Ray:
69
+ - 363ad1606996147f-AMS
70
+ body:
71
+ encoding: ASCII-8BIT
72
+ string: '{"data":[{"id":"18969","type":"program","attributes":{"handle":"github","created_at":"2017-03-08T19:22:41.884Z","updated_at":"2017-04-09T08:15:15.228Z"}}],"links":{}}'
73
+ http_version:
74
+ recorded_at: Tue, 23 May 2017 20:37:37 GMT
75
+ - request:
76
+ method: get
77
+ uri: https://api.hackerone.com/v1/programs/18969
78
+ body:
79
+ encoding: US-ASCII
80
+ string: ''
81
+ headers:
82
+ Authorization:
83
+ - Basic c2pvcnM6cjNENlR0TDQrMDBMci9jTmxuaTF6cXFRVDZkbGx2c3F0RHVtTVlKZzNybz0=
84
+ User-Agent:
85
+ - Faraday v0.12.1
86
+ Accept-Encoding:
87
+ - gzip;q=1.0,deflate;q=0.6,identity;q=0.3
88
+ Accept:
89
+ - "*/*"
90
+ response:
91
+ status:
92
+ code: 200
93
+ message: OK
94
+ headers:
95
+ Date:
96
+ - Tue, 23 May 2017 20:38:18 GMT
97
+ Content-Type:
98
+ - application/json; charset=utf-8
99
+ Transfer-Encoding:
100
+ - chunked
101
+ Connection:
102
+ - keep-alive
103
+ Set-Cookie:
104
+ - __cfduid=dbf0ffc90aeef418237806a1a6410d2991495571897; expires=Wed, 23-May-18
105
+ 20:38:17 GMT; path=/; Domain=api.hackerone.com; HttpOnly
106
+ X-Request-Id:
107
+ - aabc9064-72af-4a6e-b453-7677a505ff30
108
+ Etag:
109
+ - W/"8d1031d8f8171c3865ad8115a3236cc4"
110
+ Cache-Control:
111
+ - max-age=0, private, must-revalidate
112
+ Strict-Transport-Security:
113
+ - max-age=31536000; includeSubDomains; preload
114
+ Content-Security-Policy:
115
+ - 'default-src ''none''; base-uri ''self''; block-all-mixed-content; child-src
116
+ www.youtube-nocookie.com; connect-src ''self'' www.google-analytics.com errors.hackerone.net;
117
+ font-src ''self''; form-action ''self''; frame-ancestors ''none''; img-src
118
+ ''self'' data: cover-photos.hackerone-user-content.com profile-photos.hackerone-user-content.com
119
+ hackerone-attachments.s3.amazonaws.com; media-src ''self'' hackerone-attachments.s3.amazonaws.com;
120
+ script-src ''self'' www.google-analytics.com; style-src ''self'' ''unsafe-inline'';
121
+ report-uri https://errors.hackerone.net/api/30/csp-report/?sentry_key=61c1e2f50d21487c97a071737701f598'
122
+ X-Content-Type-Options:
123
+ - nosniff
124
+ X-Download-Options:
125
+ - noopen
126
+ X-Frame-Options:
127
+ - DENY
128
+ X-Permitted-Cross-Domain-Policies:
129
+ - none
130
+ X-Xss-Protection:
131
+ - 1; mode=block
132
+ Public-Key-Pins-Report-Only:
133
+ - pin-sha256="WoiWRyIOVNa9ihaBciRSC7XHjliYS9VwUGOIud4PB18="; pin-sha256="r/mIkG3eEpVdm+u/ko/cwxzOMo1bk4TyHIlByibiA5E=";
134
+ pin-sha256="K87oWBWM9UZfyddvDfoxL+8lpNyoUB2ptGtn0fv6G2Q="; pin-sha256="iie1VXtL7HzAMF+/PVPR9xzT80kQxdZeJ+zduCB3uj0=";
135
+ pin-sha256="cGuxAXyFXFkWm61cF4HPWX8S0srS9j0aSqN0k4AP+4A="; pin-sha256="bIlWcjiKq1mftH/xd7Hw1JO77Cr+Gv+XYcGUQWwO+A4=";
136
+ pin-sha256="tXD+dGAP8rGY4PW1be90cOYEwg7pZ4G+yPZmIZWPTSg="; max-age=600; includeSubDomains;
137
+ report-uri="https://hackerone.report-uri.io/r/default/hpkp/reportOnly"
138
+ Server:
139
+ - cloudflare-nginx
140
+ Cf-Ray:
141
+ - 363ad1664d9972e9-AMS
142
+ body:
143
+ encoding: ASCII-8BIT
144
+ string: '{"data":{"id":"18969","type":"program","attributes":{"handle":"github","created_at":"2017-03-08T19:22:41.884Z","updated_at":"2017-04-09T08:15:15.228Z"},"relationships":{"groups":{"data":[{"id":"23579","type":"group","attributes":{"name":"Standard","created_at":"2017-03-08T19:22:43.259Z","permissions":["report_management","reward_management"]}},{"id":"23578","type":"group","attributes":{"name":"Admin","created_at":"2017-03-08T19:22:43.243Z","permissions":["user_management","program_management"]}}]},"members":{"data":[{"id":"39241","type":"member","attributes":{"created_at":"2017-05-23T20:19:30.830Z","permissions":["program_management","report_management","reward_management","user_management"]},"relationships":{"user":{"data":{"id":"170310","type":"user","attributes":{"username":"esjee","name":null,"disabled":false,"created_at":"2017-05-23T20:19:30.805Z","profile_picture":{"62x62":"/assets/avatars/default-71a302d706457f3d3a31eb30fa3e73e6cf0b1d677b8fa218eaeaffd67ae97918.png","82x82":"/assets/avatars/default-71a302d706457f3d3a31eb30fa3e73e6cf0b1d677b8fa218eaeaffd67ae97918.png","110x110":"/assets/avatars/default-71a302d706457f3d3a31eb30fa3e73e6cf0b1d677b8fa218eaeaffd67ae97918.png","260x260":"/assets/avatars/default-71a302d706457f3d3a31eb30fa3e73e6cf0b1d677b8fa218eaeaffd67ae97918.png"}}}}}},{"id":"32557","type":"member","attributes":{"created_at":"2017-03-08T19:22:44.421Z","permissions":["program_management","report_management","reward_management","user_management"]},"relationships":{"user":{"data":{"id":"147515","type":"user","attributes":{"username":"esjee","name":"esjee","disabled":false,"created_at":"2017-03-04T16:31:33.595Z","profile_picture":{"62x62":"/assets/avatars/default-71a302d706457f3d3a31eb30fa3e73e6cf0b1d677b8fa218eaeaffd67ae97918.png","82x82":"/assets/avatars/default-71a302d706457f3d3a31eb30fa3e73e6cf0b1d677b8fa218eaeaffd67ae97918.png","110x110":"/assets/avatars/default-71a302d706457f3d3a31eb30fa3e73e6cf0b1d677b8fa218eaeaffd67ae97918.png","260x260":"/assets/avatars/default-71a302d706457f3d3a31eb30fa3e73e6cf0b1d677b8fa218eaeaffd67ae97918.png"}}}}}},{"id":"32556","type":"member","attributes":{"created_at":"2017-03-08T19:22:43.226Z","permissions":["program_management","report_management","reward_management","user_management"]},"relationships":{"user":{"data":{"id":"4954","type":"user","attributes":{"username":"demo-member","name":"Demo
145
+ Member","disabled":false,"created_at":"2014-04-14T11:45:00.949Z","profile_picture":{"62x62":"https://profile-photos.hackerone-user-content.com/production/000/004/954/76e628d12eaacde79878b890df02c065f740b1a4_small.png?1423472456","82x82":"https://profile-photos.hackerone-user-content.com/production/000/004/954/75e4cf2599f591e618646429db57d986e496ccee_medium.png?1423472456","110x110":"https://profile-photos.hackerone-user-content.com/production/000/004/954/25f5c8af70323cacb2c2ffa17d68cac2500dc410_large.png?1423472456","260x260":"https://profile-photos.hackerone-user-content.com/production/000/004/954/d903c042cdc7798ad76684563624ee7ea071aed8_xtralarge.png?1423472456"}}}}}}]}}}}'
146
+ http_version:
147
+ recorded_at: Tue, 23 May 2017 20:37:38 GMT
148
+ - request:
149
+ method: put
150
+ uri: https://api.hackerone.com/v1/reports/200/assignee
151
+ body:
152
+ encoding: UTF-8
153
+ string: '{"data":{"type":"user","id":"147515"}}'
154
+ headers:
155
+ Authorization:
156
+ - Basic c2pvcnM6cjNENlR0TDQrMDBMci9jTmxuaTF6cXFRVDZkbGx2c3F0RHVtTVlKZzNybz0=
157
+ User-Agent:
158
+ - Faraday v0.12.1
159
+ Content-Type:
160
+ - application/json
161
+ Accept-Encoding:
162
+ - gzip;q=1.0,deflate;q=0.6,identity;q=0.3
163
+ Accept:
164
+ - "*/*"
165
+ response:
166
+ status:
167
+ code: 200
168
+ message: OK
169
+ headers:
170
+ Date:
171
+ - Tue, 23 May 2017 20:38:19 GMT
172
+ Content-Type:
173
+ - application/json; charset=utf-8
174
+ Transfer-Encoding:
175
+ - chunked
176
+ Connection:
177
+ - keep-alive
178
+ Set-Cookie:
179
+ - __cfduid=dfd38950adaa825d473e6b4c2688620a91495571898; expires=Wed, 23-May-18
180
+ 20:38:18 GMT; path=/; Domain=api.hackerone.com; HttpOnly
181
+ X-Request-Id:
182
+ - 4664122f-23c3-4a0a-80e2-beb4ed9faa4f
183
+ Etag:
184
+ - W/"88c50921e82a8ac815e43ef219a80116"
185
+ Cache-Control:
186
+ - max-age=0, private, must-revalidate
187
+ Strict-Transport-Security:
188
+ - max-age=31536000; includeSubDomains; preload
189
+ Content-Security-Policy:
190
+ - 'default-src ''none''; base-uri ''self''; block-all-mixed-content; child-src
191
+ www.youtube-nocookie.com; connect-src ''self'' www.google-analytics.com errors.hackerone.net;
192
+ font-src ''self''; form-action ''self''; frame-ancestors ''none''; img-src
193
+ ''self'' data: cover-photos.hackerone-user-content.com profile-photos.hackerone-user-content.com
194
+ hackerone-attachments.s3.amazonaws.com; media-src ''self'' hackerone-attachments.s3.amazonaws.com;
195
+ script-src ''self'' www.google-analytics.com; style-src ''self'' ''unsafe-inline'';
196
+ report-uri https://errors.hackerone.net/api/30/csp-report/?sentry_key=61c1e2f50d21487c97a071737701f598'
197
+ X-Content-Type-Options:
198
+ - nosniff
199
+ X-Download-Options:
200
+ - noopen
201
+ X-Frame-Options:
202
+ - DENY
203
+ X-Permitted-Cross-Domain-Policies:
204
+ - none
205
+ X-Xss-Protection:
206
+ - 1; mode=block
207
+ Public-Key-Pins-Report-Only:
208
+ - pin-sha256="WoiWRyIOVNa9ihaBciRSC7XHjliYS9VwUGOIud4PB18="; pin-sha256="r/mIkG3eEpVdm+u/ko/cwxzOMo1bk4TyHIlByibiA5E=";
209
+ pin-sha256="K87oWBWM9UZfyddvDfoxL+8lpNyoUB2ptGtn0fv6G2Q="; pin-sha256="iie1VXtL7HzAMF+/PVPR9xzT80kQxdZeJ+zduCB3uj0=";
210
+ pin-sha256="cGuxAXyFXFkWm61cF4HPWX8S0srS9j0aSqN0k4AP+4A="; pin-sha256="bIlWcjiKq1mftH/xd7Hw1JO77Cr+Gv+XYcGUQWwO+A4=";
211
+ pin-sha256="tXD+dGAP8rGY4PW1be90cOYEwg7pZ4G+yPZmIZWPTSg="; max-age=600; includeSubDomains;
212
+ report-uri="https://hackerone.report-uri.io/r/default/hpkp/reportOnly"
213
+ Server:
214
+ - cloudflare-nginx
215
+ Cf-Ray:
216
+ - 363ad16baa6e0c1d-AMS
217
+ body:
218
+ encoding: ASCII-8BIT
219
+ string: '{"data":{"id":"200","type":"report","attributes":{"title":"Serious
220
+ stuff","state":"new","created_at":"2017-03-16T19:44:16.334Z","vulnerability_information":"plz
221
+ fix","triaged_at":null,"closed_at":null,"last_reporter_activity_at":"2017-03-16T19:44:30.927Z","first_program_activity_at":"2017-03-16T19:44:16.385Z","last_program_activity_at":"2017-03-16T19:44:30.927Z","bounty_awarded_at":null,"swag_awarded_at":null,"disclosed_at":null,"last_public_activity_at":"2017-03-16T19:44:30.927Z","last_activity_at":"2017-05-23T20:38:18.851Z"},"relationships":{"reporter":{"data":{"id":"147515","type":"user","attributes":{"username":"esjee","name":"esjee","disabled":false,"created_at":"2017-03-04T16:31:33.595Z","profile_picture":{"62x62":"/assets/avatars/default-71a302d706457f3d3a31eb30fa3e73e6cf0b1d677b8fa218eaeaffd67ae97918.png","82x82":"/assets/avatars/default-71a302d706457f3d3a31eb30fa3e73e6cf0b1d677b8fa218eaeaffd67ae97918.png","110x110":"/assets/avatars/default-71a302d706457f3d3a31eb30fa3e73e6cf0b1d677b8fa218eaeaffd67ae97918.png","260x260":"/assets/avatars/default-71a302d706457f3d3a31eb30fa3e73e6cf0b1d677b8fa218eaeaffd67ae97918.png"}}}},"assignee":{"data":{"type":"user","id":"147515","attributes":{"username":"esjee","name":"esjee","disabled":false,"created_at":"2017-03-04T16:31:33.595Z","profile_picture":{"62x62":"/assets/avatars/default-71a302d706457f3d3a31eb30fa3e73e6cf0b1d677b8fa218eaeaffd67ae97918.png","82x82":"/assets/avatars/default-71a302d706457f3d3a31eb30fa3e73e6cf0b1d677b8fa218eaeaffd67ae97918.png","110x110":"/assets/avatars/default-71a302d706457f3d3a31eb30fa3e73e6cf0b1d677b8fa218eaeaffd67ae97918.png","260x260":"/assets/avatars/default-71a302d706457f3d3a31eb30fa3e73e6cf0b1d677b8fa218eaeaffd67ae97918.png"}}}},"program":{"data":{"id":"18969","type":"program","attributes":{"handle":"github","created_at":"2017-03-08T19:22:41.884Z","updated_at":"2017-04-09T08:15:15.228Z"}}},"severity":{"data":{"id":"31671","type":"severity","attributes":{"rating":"high","author_type":"User","user_id":147515,"created_at":"2017-03-16T19:44:16.371Z"}}},"swag":{"data":[]},"attachments":{"data":[]},"vulnerability_types":{"data":[{"id":"249255","type":"vulnerability-type","attributes":{"name":"Cross-Site
222
+ Scripting (XSS)","description":"Failure of a site to validate, filter, or
223
+ encode user input before returning it to another user''s web client.\n","created_at":"2017-03-08T19:22:43.582Z"}}]},"weakness":{"data":{"id":"60","type":"weakness","attributes":{"name":"Cross-site
224
+ Scripting (XSS) - Generic","description":"The software does not neutralize
225
+ or incorrectly neutralizes user-controllable input before it is placed in
226
+ output that is used as a web page that is served to other users.","created_at":"2017-01-05T01:51:19.000Z"}}},"activities":{"data":[{"type":"activity-user-assigned-to-bug","id":"1696130","attributes":{"message":null,"created_at":"2017-05-23T20:38:18.851Z","updated_at":"2017-05-23T20:38:18.851Z","internal":true},"relationships":{"actor":{"data":{"type":"user","id":"170310","attributes":{"username":"esjee","name":null,"disabled":false,"created_at":"2017-05-23T20:19:30.805Z","profile_picture":{"62x62":"/assets/avatars/default-71a302d706457f3d3a31eb30fa3e73e6cf0b1d677b8fa218eaeaffd67ae97918.png","82x82":"/assets/avatars/default-71a302d706457f3d3a31eb30fa3e73e6cf0b1d677b8fa218eaeaffd67ae97918.png","110x110":"/assets/avatars/default-71a302d706457f3d3a31eb30fa3e73e6cf0b1d677b8fa218eaeaffd67ae97918.png","260x260":"/assets/avatars/default-71a302d706457f3d3a31eb30fa3e73e6cf0b1d677b8fa218eaeaffd67ae97918.png"}}}},"assigned_user":{"data":{"id":"147515","type":"user","attributes":{"username":"esjee","name":"esjee","disabled":false,"created_at":"2017-03-04T16:31:33.595Z","profile_picture":{"62x62":"/assets/avatars/default-71a302d706457f3d3a31eb30fa3e73e6cf0b1d677b8fa218eaeaffd67ae97918.png","82x82":"/assets/avatars/default-71a302d706457f3d3a31eb30fa3e73e6cf0b1d677b8fa218eaeaffd67ae97918.png","110x110":"/assets/avatars/default-71a302d706457f3d3a31eb30fa3e73e6cf0b1d677b8fa218eaeaffd67ae97918.png","260x260":"/assets/avatars/default-71a302d706457f3d3a31eb30fa3e73e6cf0b1d677b8fa218eaeaffd67ae97918.png"}}}}}},{"type":"activity-nobody-assigned-to-bug","id":"1696106","attributes":{"message":null,"created_at":"2017-05-23T20:32:57.765Z","updated_at":"2017-05-23T20:32:57.765Z","internal":true},"relationships":{"actor":{"data":{"type":"user","id":"170310","attributes":{"username":"esjee","name":null,"disabled":false,"created_at":"2017-05-23T20:19:30.805Z","profile_picture":{"62x62":"/assets/avatars/default-71a302d706457f3d3a31eb30fa3e73e6cf0b1d677b8fa218eaeaffd67ae97918.png","82x82":"/assets/avatars/default-71a302d706457f3d3a31eb30fa3e73e6cf0b1d677b8fa218eaeaffd67ae97918.png","110x110":"/assets/avatars/default-71a302d706457f3d3a31eb30fa3e73e6cf0b1d677b8fa218eaeaffd67ae97918.png","260x260":"/assets/avatars/default-71a302d706457f3d3a31eb30fa3e73e6cf0b1d677b8fa218eaeaffd67ae97918.png"}}}}}},{"type":"activity-group-assigned-to-bug","id":"1696105","attributes":{"message":null,"created_at":"2017-05-23T20:32:55.460Z","updated_at":"2017-05-23T20:32:55.460Z","internal":true},"relationships":{"actor":{"data":{"type":"user","id":"170310","attributes":{"username":"esjee","name":null,"disabled":false,"created_at":"2017-05-23T20:19:30.805Z","profile_picture":{"62x62":"/assets/avatars/default-71a302d706457f3d3a31eb30fa3e73e6cf0b1d677b8fa218eaeaffd67ae97918.png","82x82":"/assets/avatars/default-71a302d706457f3d3a31eb30fa3e73e6cf0b1d677b8fa218eaeaffd67ae97918.png","110x110":"/assets/avatars/default-71a302d706457f3d3a31eb30fa3e73e6cf0b1d677b8fa218eaeaffd67ae97918.png","260x260":"/assets/avatars/default-71a302d706457f3d3a31eb30fa3e73e6cf0b1d677b8fa218eaeaffd67ae97918.png"}}}},"group":{"data":{"id":"23578","type":"group","attributes":{"name":"Admin","created_at":"2017-03-08T19:22:43.243Z","permissions":["user_management","program_management"]}}}}},{"type":"activity-user-assigned-to-bug","id":"1696104","attributes":{"message":null,"created_at":"2017-05-23T20:32:54.570Z","updated_at":"2017-05-23T20:32:54.570Z","internal":true},"relationships":{"actor":{"data":{"type":"user","id":"170310","attributes":{"username":"esjee","name":null,"disabled":false,"created_at":"2017-05-23T20:19:30.805Z","profile_picture":{"62x62":"/assets/avatars/default-71a302d706457f3d3a31eb30fa3e73e6cf0b1d677b8fa218eaeaffd67ae97918.png","82x82":"/assets/avatars/default-71a302d706457f3d3a31eb30fa3e73e6cf0b1d677b8fa218eaeaffd67ae97918.png","110x110":"/assets/avatars/default-71a302d706457f3d3a31eb30fa3e73e6cf0b1d677b8fa218eaeaffd67ae97918.png","260x260":"/assets/avatars/default-71a302d706457f3d3a31eb30fa3e73e6cf0b1d677b8fa218eaeaffd67ae97918.png"}}}},"assigned_user":{"data":{"id":"147515","type":"user","attributes":{"username":"esjee","name":"esjee","disabled":false,"created_at":"2017-03-04T16:31:33.595Z","profile_picture":{"62x62":"/assets/avatars/default-71a302d706457f3d3a31eb30fa3e73e6cf0b1d677b8fa218eaeaffd67ae97918.png","82x82":"/assets/avatars/default-71a302d706457f3d3a31eb30fa3e73e6cf0b1d677b8fa218eaeaffd67ae97918.png","110x110":"/assets/avatars/default-71a302d706457f3d3a31eb30fa3e73e6cf0b1d677b8fa218eaeaffd67ae97918.png","260x260":"/assets/avatars/default-71a302d706457f3d3a31eb30fa3e73e6cf0b1d677b8fa218eaeaffd67ae97918.png"}}}}}},{"type":"activity-nobody-assigned-to-bug","id":"1696093","attributes":{"message":null,"created_at":"2017-05-23T20:31:17.683Z","updated_at":"2017-05-23T20:31:17.683Z","internal":true},"relationships":{"actor":{"data":{"type":"user","id":"170310","attributes":{"username":"esjee","name":null,"disabled":false,"created_at":"2017-05-23T20:19:30.805Z","profile_picture":{"62x62":"/assets/avatars/default-71a302d706457f3d3a31eb30fa3e73e6cf0b1d677b8fa218eaeaffd67ae97918.png","82x82":"/assets/avatars/default-71a302d706457f3d3a31eb30fa3e73e6cf0b1d677b8fa218eaeaffd67ae97918.png","110x110":"/assets/avatars/default-71a302d706457f3d3a31eb30fa3e73e6cf0b1d677b8fa218eaeaffd67ae97918.png","260x260":"/assets/avatars/default-71a302d706457f3d3a31eb30fa3e73e6cf0b1d677b8fa218eaeaffd67ae97918.png"}}}}}},{"type":"activity-nobody-assigned-to-bug","id":"1696068","attributes":{"message":null,"created_at":"2017-05-23T20:22:49.781Z","updated_at":"2017-05-23T20:22:49.781Z","internal":true},"relationships":{"actor":{"data":{"type":"user","id":"170310","attributes":{"username":"esjee","name":null,"disabled":false,"created_at":"2017-05-23T20:19:30.805Z","profile_picture":{"62x62":"/assets/avatars/default-71a302d706457f3d3a31eb30fa3e73e6cf0b1d677b8fa218eaeaffd67ae97918.png","82x82":"/assets/avatars/default-71a302d706457f3d3a31eb30fa3e73e6cf0b1d677b8fa218eaeaffd67ae97918.png","110x110":"/assets/avatars/default-71a302d706457f3d3a31eb30fa3e73e6cf0b1d677b8fa218eaeaffd67ae97918.png","260x260":"/assets/avatars/default-71a302d706457f3d3a31eb30fa3e73e6cf0b1d677b8fa218eaeaffd67ae97918.png"}}}}}},{"type":"activity-group-assigned-to-bug","id":"1696061","attributes":{"message":null,"created_at":"2017-05-23T20:21:32.579Z","updated_at":"2017-05-23T20:21:32.579Z","internal":true},"relationships":{"actor":{"data":{"type":"user","id":"170310","attributes":{"username":"esjee","name":null,"disabled":false,"created_at":"2017-05-23T20:19:30.805Z","profile_picture":{"62x62":"/assets/avatars/default-71a302d706457f3d3a31eb30fa3e73e6cf0b1d677b8fa218eaeaffd67ae97918.png","82x82":"/assets/avatars/default-71a302d706457f3d3a31eb30fa3e73e6cf0b1d677b8fa218eaeaffd67ae97918.png","110x110":"/assets/avatars/default-71a302d706457f3d3a31eb30fa3e73e6cf0b1d677b8fa218eaeaffd67ae97918.png","260x260":"/assets/avatars/default-71a302d706457f3d3a31eb30fa3e73e6cf0b1d677b8fa218eaeaffd67ae97918.png"}}}},"group":{"data":{"id":"23579","type":"group","attributes":{"name":"Standard","created_at":"2017-03-08T19:22:43.259Z","permissions":["report_management","reward_management"]}}}}},{"type":"activity-user-assigned-to-bug","id":"1696058","attributes":{"message":null,"created_at":"2017-05-23T20:21:22.192Z","updated_at":"2017-05-23T20:21:22.192Z","internal":true},"relationships":{"actor":{"data":{"type":"user","id":"170310","attributes":{"username":"esjee","name":null,"disabled":false,"created_at":"2017-05-23T20:19:30.805Z","profile_picture":{"62x62":"/assets/avatars/default-71a302d706457f3d3a31eb30fa3e73e6cf0b1d677b8fa218eaeaffd67ae97918.png","82x82":"/assets/avatars/default-71a302d706457f3d3a31eb30fa3e73e6cf0b1d677b8fa218eaeaffd67ae97918.png","110x110":"/assets/avatars/default-71a302d706457f3d3a31eb30fa3e73e6cf0b1d677b8fa218eaeaffd67ae97918.png","260x260":"/assets/avatars/default-71a302d706457f3d3a31eb30fa3e73e6cf0b1d677b8fa218eaeaffd67ae97918.png"}}}},"assigned_user":{"data":{"id":"147515","type":"user","attributes":{"username":"esjee","name":"esjee","disabled":false,"created_at":"2017-03-04T16:31:33.595Z","profile_picture":{"62x62":"/assets/avatars/default-71a302d706457f3d3a31eb30fa3e73e6cf0b1d677b8fa218eaeaffd67ae97918.png","82x82":"/assets/avatars/default-71a302d706457f3d3a31eb30fa3e73e6cf0b1d677b8fa218eaeaffd67ae97918.png","110x110":"/assets/avatars/default-71a302d706457f3d3a31eb30fa3e73e6cf0b1d677b8fa218eaeaffd67ae97918.png","260x260":"/assets/avatars/default-71a302d706457f3d3a31eb30fa3e73e6cf0b1d677b8fa218eaeaffd67ae97918.png"}}}}}},{"type":"activity-nobody-assigned-to-bug","id":"1675616","attributes":{"message":null,"created_at":"2017-05-15T20:25:30.334Z","updated_at":"2017-05-15T20:25:30.334Z","internal":true},"relationships":{"actor":{"data":{"type":"user","id":"160844","attributes":{"username":"api_o02mvnt8nty324wn0w5al","name":"","disabled":true,"created_at":"2017-04-20T19:25:29.165Z","profile_picture":{"62x62":"/assets/avatars/default-71a302d706457f3d3a31eb30fa3e73e6cf0b1d677b8fa218eaeaffd67ae97918.png","82x82":"/assets/avatars/default-71a302d706457f3d3a31eb30fa3e73e6cf0b1d677b8fa218eaeaffd67ae97918.png","110x110":"/assets/avatars/default-71a302d706457f3d3a31eb30fa3e73e6cf0b1d677b8fa218eaeaffd67ae97918.png","260x260":"/assets/avatars/default-71a302d706457f3d3a31eb30fa3e73e6cf0b1d677b8fa218eaeaffd67ae97918.png"}}}}}},{"type":"activity-group-assigned-to-bug","id":"1675604","attributes":{"message":null,"created_at":"2017-05-15T20:21:26.628Z","updated_at":"2017-05-15T20:21:26.628Z","internal":true},"relationships":{"actor":{"data":{"type":"user","id":"160844","attributes":{"username":"api_o02mvnt8nty324wn0w5al","name":"","disabled":true,"created_at":"2017-04-20T19:25:29.165Z","profile_picture":{"62x62":"/assets/avatars/default-71a302d706457f3d3a31eb30fa3e73e6cf0b1d677b8fa218eaeaffd67ae97918.png","82x82":"/assets/avatars/default-71a302d706457f3d3a31eb30fa3e73e6cf0b1d677b8fa218eaeaffd67ae97918.png","110x110":"/assets/avatars/default-71a302d706457f3d3a31eb30fa3e73e6cf0b1d677b8fa218eaeaffd67ae97918.png","260x260":"/assets/avatars/default-71a302d706457f3d3a31eb30fa3e73e6cf0b1d677b8fa218eaeaffd67ae97918.png"}}}},"group":{"data":{"id":"23578","type":"group","attributes":{"name":"Admin","created_at":"2017-03-08T19:22:43.243Z","permissions":["user_management","program_management"]}}}}},{"type":"activity-nobody-assigned-to-bug","id":"1675418","attributes":{"message":null,"created_at":"2017-05-15T19:16:39.244Z","updated_at":"2017-05-15T19:16:39.244Z","internal":true},"relationships":{"actor":{"data":{"type":"user","id":"160844","attributes":{"username":"api_o02mvnt8nty324wn0w5al","name":"","disabled":true,"created_at":"2017-04-20T19:25:29.165Z","profile_picture":{"62x62":"/assets/avatars/default-71a302d706457f3d3a31eb30fa3e73e6cf0b1d677b8fa218eaeaffd67ae97918.png","82x82":"/assets/avatars/default-71a302d706457f3d3a31eb30fa3e73e6cf0b1d677b8fa218eaeaffd67ae97918.png","110x110":"/assets/avatars/default-71a302d706457f3d3a31eb30fa3e73e6cf0b1d677b8fa218eaeaffd67ae97918.png","260x260":"/assets/avatars/default-71a302d706457f3d3a31eb30fa3e73e6cf0b1d677b8fa218eaeaffd67ae97918.png"}}}}}},{"type":"activity-nobody-assigned-to-bug","id":"1675409","attributes":{"message":null,"created_at":"2017-05-15T19:14:03.281Z","updated_at":"2017-05-15T19:14:03.281Z","internal":true},"relationships":{"actor":{"data":{"type":"user","id":"160844","attributes":{"username":"api_o02mvnt8nty324wn0w5al","name":"","disabled":true,"created_at":"2017-04-20T19:25:29.165Z","profile_picture":{"62x62":"/assets/avatars/default-71a302d706457f3d3a31eb30fa3e73e6cf0b1d677b8fa218eaeaffd67ae97918.png","82x82":"/assets/avatars/default-71a302d706457f3d3a31eb30fa3e73e6cf0b1d677b8fa218eaeaffd67ae97918.png","110x110":"/assets/avatars/default-71a302d706457f3d3a31eb30fa3e73e6cf0b1d677b8fa218eaeaffd67ae97918.png","260x260":"/assets/avatars/default-71a302d706457f3d3a31eb30fa3e73e6cf0b1d677b8fa218eaeaffd67ae97918.png"}}}}}},{"type":"activity-nobody-assigned-to-bug","id":"1675324","attributes":{"message":null,"created_at":"2017-05-15T18:56:31.322Z","updated_at":"2017-05-15T18:56:31.322Z","internal":true},"relationships":{"actor":{"data":{"type":"user","id":"160844","attributes":{"username":"api_o02mvnt8nty324wn0w5al","name":"","disabled":true,"created_at":"2017-04-20T19:25:29.165Z","profile_picture":{"62x62":"/assets/avatars/default-71a302d706457f3d3a31eb30fa3e73e6cf0b1d677b8fa218eaeaffd67ae97918.png","82x82":"/assets/avatars/default-71a302d706457f3d3a31eb30fa3e73e6cf0b1d677b8fa218eaeaffd67ae97918.png","110x110":"/assets/avatars/default-71a302d706457f3d3a31eb30fa3e73e6cf0b1d677b8fa218eaeaffd67ae97918.png","260x260":"/assets/avatars/default-71a302d706457f3d3a31eb30fa3e73e6cf0b1d677b8fa218eaeaffd67ae97918.png"}}}}}},{"type":"activity-group-assigned-to-bug","id":"1675321","attributes":{"message":null,"created_at":"2017-05-15T18:55:34.311Z","updated_at":"2017-05-15T18:55:34.311Z","internal":true},"relationships":{"actor":{"data":{"type":"user","id":"160844","attributes":{"username":"api_o02mvnt8nty324wn0w5al","name":"","disabled":true,"created_at":"2017-04-20T19:25:29.165Z","profile_picture":{"62x62":"/assets/avatars/default-71a302d706457f3d3a31eb30fa3e73e6cf0b1d677b8fa218eaeaffd67ae97918.png","82x82":"/assets/avatars/default-71a302d706457f3d3a31eb30fa3e73e6cf0b1d677b8fa218eaeaffd67ae97918.png","110x110":"/assets/avatars/default-71a302d706457f3d3a31eb30fa3e73e6cf0b1d677b8fa218eaeaffd67ae97918.png","260x260":"/assets/avatars/default-71a302d706457f3d3a31eb30fa3e73e6cf0b1d677b8fa218eaeaffd67ae97918.png"}}}},"group":{"data":{"id":"23578","type":"group","attributes":{"name":"Admin","created_at":"2017-03-08T19:22:43.243Z","permissions":["user_management","program_management"]}}}}},{"type":"activity-group-assigned-to-bug","id":"1675310","attributes":{"message":null,"created_at":"2017-05-15T18:52:38.454Z","updated_at":"2017-05-15T18:52:38.454Z","internal":true},"relationships":{"actor":{"data":{"type":"user","id":"160844","attributes":{"username":"api_o02mvnt8nty324wn0w5al","name":"","disabled":true,"created_at":"2017-04-20T19:25:29.165Z","profile_picture":{"62x62":"/assets/avatars/default-71a302d706457f3d3a31eb30fa3e73e6cf0b1d677b8fa218eaeaffd67ae97918.png","82x82":"/assets/avatars/default-71a302d706457f3d3a31eb30fa3e73e6cf0b1d677b8fa218eaeaffd67ae97918.png","110x110":"/assets/avatars/default-71a302d706457f3d3a31eb30fa3e73e6cf0b1d677b8fa218eaeaffd67ae97918.png","260x260":"/assets/avatars/default-71a302d706457f3d3a31eb30fa3e73e6cf0b1d677b8fa218eaeaffd67ae97918.png"}}}},"group":{"data":{"id":"23578","type":"group","attributes":{"name":"Admin","created_at":"2017-03-08T19:22:43.243Z","permissions":["user_management","program_management"]}}}}},{"type":"activity-group-assigned-to-bug","id":"1675302","attributes":{"message":null,"created_at":"2017-05-15T18:51:19.929Z","updated_at":"2017-05-15T18:51:19.929Z","internal":true},"relationships":{"actor":{"data":{"type":"user","id":"160844","attributes":{"username":"api_o02mvnt8nty324wn0w5al","name":"","disabled":true,"created_at":"2017-04-20T19:25:29.165Z","profile_picture":{"62x62":"/assets/avatars/default-71a302d706457f3d3a31eb30fa3e73e6cf0b1d677b8fa218eaeaffd67ae97918.png","82x82":"/assets/avatars/default-71a302d706457f3d3a31eb30fa3e73e6cf0b1d677b8fa218eaeaffd67ae97918.png","110x110":"/assets/avatars/default-71a302d706457f3d3a31eb30fa3e73e6cf0b1d677b8fa218eaeaffd67ae97918.png","260x260":"/assets/avatars/default-71a302d706457f3d3a31eb30fa3e73e6cf0b1d677b8fa218eaeaffd67ae97918.png"}}}},"group":{"data":{"id":"23578","type":"group","attributes":{"name":"Admin","created_at":"2017-03-08T19:22:43.243Z","permissions":["user_management","program_management"]}}}}},{"type":"activity-comment","id":"1546353","attributes":{"message":"no
227
+ fix?","created_at":"2017-03-16T19:44:30.927Z","updated_at":"2017-03-16T19:44:30.927Z","internal":false},"relationships":{"actor":{"data":{"type":"user","id":"147515","attributes":{"username":"esjee","name":"esjee","disabled":false,"created_at":"2017-03-04T16:31:33.595Z","profile_picture":{"62x62":"/assets/avatars/default-71a302d706457f3d3a31eb30fa3e73e6cf0b1d677b8fa218eaeaffd67ae97918.png","82x82":"/assets/avatars/default-71a302d706457f3d3a31eb30fa3e73e6cf0b1d677b8fa218eaeaffd67ae97918.png","110x110":"/assets/avatars/default-71a302d706457f3d3a31eb30fa3e73e6cf0b1d677b8fa218eaeaffd67ae97918.png","260x260":"/assets/avatars/default-71a302d706457f3d3a31eb30fa3e73e6cf0b1d677b8fa218eaeaffd67ae97918.png"}}}}}}]},"bounties":{"data":[]},"summaries":{"data":[]}}}}'
228
+ http_version:
229
+ recorded_at: Tue, 23 May 2017 20:37:39 GMT
230
+ recorded_with: VCR 3.0.3
data/fixtures/vcr_cassettes/assign_report_to_user_no_permission.yml ADDED
@@ -0,0 +1,220 @@
1
+ ---
2
+ http_interactions:
3
+ - request:
4
+ method: get
5
+ uri: https://api.hackerone.com/v1/me/programs
6
+ body:
7
+ encoding: US-ASCII
8
+ string: ''
9
+ headers:
10
+ Authorization:
11
+ - Basic c2pvcnM6cjNENlR0TDQrMDBMci9jTmxuaTF6cXFRVDZkbGx2c3F0RHVtTVlKZzNybz0=
12
+ User-Agent:
13
+ - Faraday v0.12.1
14
+ Accept-Encoding:
15
+ - gzip;q=1.0,deflate;q=0.6,identity;q=0.3
16
+ Accept:
17
+ - "*/*"
18
+ response:
19
+ status:
20
+ code: 200
21
+ message: OK
22
+ headers:
23
+ Date:
24
+ - Tue, 23 May 2017 20:40:57 GMT
25
+ Content-Type:
26
+ - application/json; charset=utf-8
27
+ Transfer-Encoding:
28
+ - chunked
29
+ Connection:
30
+ - keep-alive
31
+ Set-Cookie:
32
+ - __cfduid=d0698c5c1728c3e911ca6edb0fabad1db1495572057; expires=Wed, 23-May-18
33
+ 20:40:57 GMT; path=/; Domain=api.hackerone.com; HttpOnly
34
+ X-Request-Id:
35
+ - f13a33b5-e863-484d-ae01-b988b82dce02
36
+ Etag:
37
+ - W/"9329ef6b8f370e76d96d71977a6480c4"
38
+ Cache-Control:
39
+ - max-age=0, private, must-revalidate
40
+ Strict-Transport-Security:
41
+ - max-age=31536000; includeSubDomains; preload
42
+ Content-Security-Policy:
43
+ - 'default-src ''none''; base-uri ''self''; block-all-mixed-content; child-src
44
+ www.youtube-nocookie.com; connect-src ''self'' www.google-analytics.com errors.hackerone.net;
45
+ font-src ''self''; form-action ''self''; frame-ancestors ''none''; img-src
46
+ ''self'' data: cover-photos.hackerone-user-content.com profile-photos.hackerone-user-content.com
47
+ hackerone-attachments.s3.amazonaws.com; media-src ''self'' hackerone-attachments.s3.amazonaws.com;
48
+ script-src ''self'' www.google-analytics.com; style-src ''self'' ''unsafe-inline'';
49
+ report-uri https://errors.hackerone.net/api/30/csp-report/?sentry_key=61c1e2f50d21487c97a071737701f598'
50
+ X-Content-Type-Options:
51
+ - nosniff
52
+ X-Download-Options:
53
+ - noopen
54
+ X-Frame-Options:
55
+ - DENY
56
+ X-Permitted-Cross-Domain-Policies:
57
+ - none
58
+ X-Xss-Protection:
59
+ - 1; mode=block
60
+ Public-Key-Pins-Report-Only:
61
+ - pin-sha256="WoiWRyIOVNa9ihaBciRSC7XHjliYS9VwUGOIud4PB18="; pin-sha256="r/mIkG3eEpVdm+u/ko/cwxzOMo1bk4TyHIlByibiA5E=";
62
+ pin-sha256="K87oWBWM9UZfyddvDfoxL+8lpNyoUB2ptGtn0fv6G2Q="; pin-sha256="iie1VXtL7HzAMF+/PVPR9xzT80kQxdZeJ+zduCB3uj0=";
63
+ pin-sha256="cGuxAXyFXFkWm61cF4HPWX8S0srS9j0aSqN0k4AP+4A="; pin-sha256="bIlWcjiKq1mftH/xd7Hw1JO77Cr+Gv+XYcGUQWwO+A4=";
64
+ pin-sha256="tXD+dGAP8rGY4PW1be90cOYEwg7pZ4G+yPZmIZWPTSg="; max-age=600; includeSubDomains;
65
+ report-uri="https://hackerone.report-uri.io/r/default/hpkp/reportOnly"
66
+ Server:
67
+ - cloudflare-nginx
68
+ Cf-Ray:
69
+ - 363ad54f7bad2c3c-AMS
70
+ body:
71
+ encoding: ASCII-8BIT
72
+ string: '{"data":[{"id":"18969","type":"program","attributes":{"handle":"github","created_at":"2017-03-08T19:22:41.884Z","updated_at":"2017-04-09T08:15:15.228Z"}}],"links":{}}'
73
+ http_version:
74
+ recorded_at: Tue, 23 May 2017 20:40:18 GMT
75
+ - request:
76
+ method: get
77
+ uri: https://api.hackerone.com/v1/programs/18969
78
+ body:
79
+ encoding: US-ASCII
80
+ string: ''
81
+ headers:
82
+ Authorization:
83
+ - Basic c2pvcnM6cjNENlR0TDQrMDBMci9jTmxuaTF6cXFRVDZkbGx2c3F0RHVtTVlKZzNybz0=
84
+ User-Agent:
85
+ - Faraday v0.12.1
86
+ Accept-Encoding:
87
+ - gzip;q=1.0,deflate;q=0.6,identity;q=0.3
88
+ Accept:
89
+ - "*/*"
90
+ response:
91
+ status:
92
+ code: 200
93
+ message: OK
94
+ headers:
95
+ Date:
96
+ - Tue, 23 May 2017 20:40:58 GMT
97
+ Content-Type:
98
+ - application/json; charset=utf-8
99
+ Transfer-Encoding:
100
+ - chunked
101
+ Connection:
102
+ - keep-alive
103
+ Set-Cookie:
104
+ - __cfduid=de4c9eb42db4668a5a6e39d28a23abf281495572057; expires=Wed, 23-May-18
105
+ 20:40:57 GMT; path=/; Domain=api.hackerone.com; HttpOnly
106
+ X-Request-Id:
107
+ - f2c05a8d-3c40-46fb-814e-25bd413a4154
108
+ Etag:
109
+ - W/"f4712fdd08f66d872753172d327d1327"
110
+ Cache-Control:
111
+ - max-age=0, private, must-revalidate
112
+ Strict-Transport-Security:
113
+ - max-age=31536000; includeSubDomains; preload
114
+ Content-Security-Policy:
115
+ - 'default-src ''none''; base-uri ''self''; block-all-mixed-content; child-src
116
+ www.youtube-nocookie.com; connect-src ''self'' www.google-analytics.com errors.hackerone.net;
117
+ font-src ''self''; form-action ''self''; frame-ancestors ''none''; img-src
118
+ ''self'' data: cover-photos.hackerone-user-content.com profile-photos.hackerone-user-content.com
119
+ hackerone-attachments.s3.amazonaws.com; media-src ''self'' hackerone-attachments.s3.amazonaws.com;
120
+ script-src ''self'' www.google-analytics.com; style-src ''self'' ''unsafe-inline'';
121
+ report-uri https://errors.hackerone.net/api/30/csp-report/?sentry_key=61c1e2f50d21487c97a071737701f598'
122
+ X-Content-Type-Options:
123
+ - nosniff
124
+ X-Download-Options:
125
+ - noopen
126
+ X-Frame-Options:
127
+ - DENY
128
+ X-Permitted-Cross-Domain-Policies:
129
+ - none
130
+ X-Xss-Protection:
131
+ - 1; mode=block
132
+ Public-Key-Pins-Report-Only:
133
+ - pin-sha256="WoiWRyIOVNa9ihaBciRSC7XHjliYS9VwUGOIud4PB18="; pin-sha256="r/mIkG3eEpVdm+u/ko/cwxzOMo1bk4TyHIlByibiA5E=";
134
+ pin-sha256="K87oWBWM9UZfyddvDfoxL+8lpNyoUB2ptGtn0fv6G2Q="; pin-sha256="iie1VXtL7HzAMF+/PVPR9xzT80kQxdZeJ+zduCB3uj0=";
135
+ pin-sha256="cGuxAXyFXFkWm61cF4HPWX8S0srS9j0aSqN0k4AP+4A="; pin-sha256="bIlWcjiKq1mftH/xd7Hw1JO77Cr+Gv+XYcGUQWwO+A4=";
136
+ pin-sha256="tXD+dGAP8rGY4PW1be90cOYEwg7pZ4G+yPZmIZWPTSg="; max-age=600; includeSubDomains;
137
+ report-uri="https://hackerone.report-uri.io/r/default/hpkp/reportOnly"
138
+ Server:
139
+ - cloudflare-nginx
140
+ Cf-Ray:
141
+ - 363ad551d84472a7-AMS
142
+ body:
143
+ encoding: ASCII-8BIT
144
+ string: '{"data":{"id":"18969","type":"program","attributes":{"handle":"github","created_at":"2017-03-08T19:22:41.884Z","updated_at":"2017-04-09T08:15:15.228Z"},"relationships":{"groups":{"data":[{"id":"23579","type":"group","attributes":{"name":"Standard","created_at":"2017-03-08T19:22:43.259Z","permissions":["report_management","reward_management"]}},{"id":"23578","type":"group","attributes":{"name":"Admin","created_at":"2017-03-08T19:22:43.243Z","permissions":["user_management","program_management"]}}]},"members":{"data":[{"id":"39241","type":"member","attributes":{"created_at":"2017-05-23T20:19:30.830Z","permissions":[]},"relationships":{"user":{"data":{"id":"170310","type":"user","attributes":{"username":"esjee","name":null,"disabled":false,"created_at":"2017-05-23T20:19:30.805Z","profile_picture":{"62x62":"/assets/avatars/default-71a302d706457f3d3a31eb30fa3e73e6cf0b1d677b8fa218eaeaffd67ae97918.png","82x82":"/assets/avatars/default-71a302d706457f3d3a31eb30fa3e73e6cf0b1d677b8fa218eaeaffd67ae97918.png","110x110":"/assets/avatars/default-71a302d706457f3d3a31eb30fa3e73e6cf0b1d677b8fa218eaeaffd67ae97918.png","260x260":"/assets/avatars/default-71a302d706457f3d3a31eb30fa3e73e6cf0b1d677b8fa218eaeaffd67ae97918.png"}}}}}},{"id":"32557","type":"member","attributes":{"created_at":"2017-03-08T19:22:44.421Z","permissions":["program_management","report_management","reward_management","user_management"]},"relationships":{"user":{"data":{"id":"147515","type":"user","attributes":{"username":"esjee","name":"esjee","disabled":false,"created_at":"2017-03-04T16:31:33.595Z","profile_picture":{"62x62":"/assets/avatars/default-71a302d706457f3d3a31eb30fa3e73e6cf0b1d677b8fa218eaeaffd67ae97918.png","82x82":"/assets/avatars/default-71a302d706457f3d3a31eb30fa3e73e6cf0b1d677b8fa218eaeaffd67ae97918.png","110x110":"/assets/avatars/default-71a302d706457f3d3a31eb30fa3e73e6cf0b1d677b8fa218eaeaffd67ae97918.png","260x260":"/assets/avatars/default-71a302d706457f3d3a31eb30fa3e73e6cf0b1d677b8fa218eaeaffd67ae97918.png"}}}}}},{"id":"32556","type":"member","attributes":{"created_at":"2017-03-08T19:22:43.226Z","permissions":["program_management","report_management","reward_management","user_management"]},"relationships":{"user":{"data":{"id":"4954","type":"user","attributes":{"username":"demo-member","name":"Demo
145
+ Member","disabled":false,"created_at":"2014-04-14T11:45:00.949Z","profile_picture":{"62x62":"https://profile-photos.hackerone-user-content.com/production/000/004/954/76e628d12eaacde79878b890df02c065f740b1a4_small.png?1423472456","82x82":"https://profile-photos.hackerone-user-content.com/production/000/004/954/75e4cf2599f591e618646429db57d986e496ccee_medium.png?1423472456","110x110":"https://profile-photos.hackerone-user-content.com/production/000/004/954/25f5c8af70323cacb2c2ffa17d68cac2500dc410_large.png?1423472456","260x260":"https://profile-photos.hackerone-user-content.com/production/000/004/954/d903c042cdc7798ad76684563624ee7ea071aed8_xtralarge.png?1423472456"}}}}}}]}}}}'
146
+ http_version:
147
+ recorded_at: Tue, 23 May 2017 20:40:19 GMT
148
+ - request:
149
+ method: put
150
+ uri: https://api.hackerone.com/v1/reports/200/assignee
151
+ body:
152
+ encoding: UTF-8
153
+ string: '{"data":{"type":"user","id":"147515"}}'
154
+ headers:
155
+ Authorization:
156
+ - Basic c2pvcnM6cjNENlR0TDQrMDBMci9jTmxuaTF6cXFRVDZkbGx2c3F0RHVtTVlKZzNybz0=
157
+ User-Agent:
158
+ - Faraday v0.12.1
159
+ Content-Type:
160
+ - application/json
161
+ Accept-Encoding:
162
+ - gzip;q=1.0,deflate;q=0.6,identity;q=0.3
163
+ Accept:
164
+ - "*/*"
165
+ response:
166
+ status:
167
+ code: 403
168
+ message: Forbidden
169
+ headers:
170
+ Date:
171
+ - Tue, 23 May 2017 20:40:59 GMT
172
+ Content-Type:
173
+ - application/json; charset=utf-8
174
+ Transfer-Encoding:
175
+ - chunked
176
+ Connection:
177
+ - keep-alive
178
+ Set-Cookie:
179
+ - __cfduid=d25bc900107d8c760caf4ebf661eb56e91495572058; expires=Wed, 23-May-18
180
+ 20:40:58 GMT; path=/; Domain=api.hackerone.com; HttpOnly
181
+ X-Request-Id:
182
+ - e54dde64-2b87-48ab-8878-5f81e579d7c0
183
+ Cache-Control:
184
+ - no-cache
185
+ Strict-Transport-Security:
186
+ - max-age=31536000; includeSubDomains; preload
187
+ Content-Security-Policy:
188
+ - 'default-src ''none''; base-uri ''self''; block-all-mixed-content; child-src
189
+ www.youtube-nocookie.com; connect-src ''self'' www.google-analytics.com errors.hackerone.net;
190
+ font-src ''self''; form-action ''self''; frame-ancestors ''none''; img-src
191
+ ''self'' data: cover-photos.hackerone-user-content.com profile-photos.hackerone-user-content.com
192
+ hackerone-attachments.s3.amazonaws.com; media-src ''self'' hackerone-attachments.s3.amazonaws.com;
193
+ script-src ''self'' www.google-analytics.com; style-src ''self'' ''unsafe-inline'';
194
+ report-uri https://errors.hackerone.net/api/30/csp-report/?sentry_key=61c1e2f50d21487c97a071737701f598'
195
+ X-Content-Type-Options:
196
+ - nosniff
197
+ X-Download-Options:
198
+ - noopen
199
+ X-Frame-Options:
200
+ - DENY
201
+ X-Permitted-Cross-Domain-Policies:
202
+ - none
203
+ X-Xss-Protection:
204
+ - 1; mode=block
205
+ Public-Key-Pins-Report-Only:
206
+ - pin-sha256="WoiWRyIOVNa9ihaBciRSC7XHjliYS9VwUGOIud4PB18="; pin-sha256="r/mIkG3eEpVdm+u/ko/cwxzOMo1bk4TyHIlByibiA5E=";
207
+ pin-sha256="K87oWBWM9UZfyddvDfoxL+8lpNyoUB2ptGtn0fv6G2Q="; pin-sha256="iie1VXtL7HzAMF+/PVPR9xzT80kQxdZeJ+zduCB3uj0=";
208
+ pin-sha256="cGuxAXyFXFkWm61cF4HPWX8S0srS9j0aSqN0k4AP+4A="; pin-sha256="bIlWcjiKq1mftH/xd7Hw1JO77Cr+Gv+XYcGUQWwO+A4=";
209
+ pin-sha256="tXD+dGAP8rGY4PW1be90cOYEwg7pZ4G+yPZmIZWPTSg="; max-age=600; includeSubDomains;
210
+ report-uri="https://hackerone.report-uri.io/r/default/hpkp/reportOnly"
211
+ Server:
212
+ - cloudflare-nginx
213
+ Cf-Ray:
214
+ - 363ad556fca372e9-AMS
215
+ body:
216
+ encoding: ASCII-8BIT
217
+ string: '{"errors":[{"status":403}]}'
218
+ http_version:
219
+ recorded_at: Tue, 23 May 2017 20:40:20 GMT
220
+ recorded_with: VCR 3.0.3