{"action":"created","issue":{"url":"https://api.github.com/repos/IdentityServer/IdentityServer3/issues/1145","labels_url":"https://api.github.com/repos/IdentityServer/IdentityServer3/issues/1145/labels{/name}","comments_url":"https://api.github.com/repos/IdentityServer/IdentityServer3/issues/1145/comments","events_url":"https://api.github.com/repos/IdentityServer/IdentityServer3/issues/1145/events","html_url":"https://github.com/IdentityServer/IdentityServer3/issues/1145","id":66241167,"number":1145,"title":" Add frame-src to CspOptions and include in CSP header","user":{"login":"dvle","id":4259544,"avatar_url":"https://avatars.githubusercontent.com/u/4259544?v=3","gravatar_id":"","url":"https://api.github.com/users/dvle","html_url":"https://github.com/dvle","followers_url":"https://api.github.com/users/dvle/followers","following_url":"https://api.github.com/users/dvle/following{/other_user}","gists_url":"https://api.github.com/users/dvle/gists{/gist_id}","starred_url":"https://api.github.com/users/dvle/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/dvle/subscriptions","organizations_url":"https://api.github.com/users/dvle/orgs","repos_url":"https://api.github.com/users/dvle/repos","events_url":"https://api.github.com/users/dvle/events{/privacy}","received_events_url":"https://api.github.com/users/dvle/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/IdentityServer/IdentityServer3/labels/enhancement","name":"enhancement","color":"84b6eb"},{"url":"https://api.github.com/repos/IdentityServer/IdentityServer3/labels/question","name":"question","color":"cc317c"}],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":7,"created_at":"2015-04-03T22:39:20Z","updated_at":"2015-04-13T15:46:11Z","closed_at":null,"body":"Adding facebook like button with IFrame but could not specify frame-src.\r\n\r\nGot it to work with this:\r\noptions.CspOptions.ScriptSrc = \"; frame-src https://www.facebook.com;\";\r\n"},"comment":{"url":"https://api.github.com/repos/IdentityServer/IdentityServer3/issues/comments/92407853","html_url":"https://github.com/IdentityServer/IdentityServer3/issues/1145#issuecomment-92407853","issue_url":"https://api.github.com/repos/IdentityServer/IdentityServer3/issues/1145","id":92407853,"user":{"login":"dvle","id":4259544,"avatar_url":"https://avatars.githubusercontent.com/u/4259544?v=3","gravatar_id":"","url":"https://api.github.com/users/dvle","html_url":"https://github.com/dvle","followers_url":"https://api.github.com/users/dvle/followers","following_url":"https://api.github.com/users/dvle/following{/other_user}","gists_url":"https://api.github.com/users/dvle/gists{/gist_id}","starred_url":"https://api.github.com/users/dvle/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/dvle/subscriptions","organizations_url":"https://api.github.com/users/dvle/orgs","repos_url":"https://api.github.com/users/dvle/repos","events_url":"https://api.github.com/users/dvle/events{/privacy}","received_events_url":"https://api.github.com/users/dvle/received_events","type":"User","site_admin":false},"created_at":"2015-04-13T15:46:11Z","updated_at":"2015-04-13T15:46:11Z","body":"Have you decided on whether or not you'll be adding support for frame-src?  I don't see a reason not to if the library already supports script-src, unless you see otherwise."}}