{"action":"opened","issue":{"url":"https://api.github.com/repos/codesy/codesy/issues/185","labels_url":"https://api.github.com/repos/codesy/codesy/issues/185/labels{/name}","comments_url":"https://api.github.com/repos/codesy/codesy/issues/185/comments","events_url":"https://api.github.com/repos/codesy/codesy/issues/185/events","html_url":"https://github.com/codesy/codesy/issues/185","id":124000085,"number":185,"title":"Add frame-ancestors CSP directive","user":{"login":"groovecoder","id":71928,"avatar_url":"https://avatars.githubusercontent.com/u/71928?v=3","gravatar_id":"","url":"https://api.github.com/users/groovecoder","html_url":"https://github.com/groovecoder","followers_url":"https://api.github.com/users/groovecoder/followers","following_url":"https://api.github.com/users/groovecoder/following{/other_user}","gists_url":"https://api.github.com/users/groovecoder/gists{/gist_id}","starred_url":"https://api.github.com/users/groovecoder/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/groovecoder/subscriptions","organizations_url":"https://api.github.com/users/groovecoder/orgs","repos_url":"https://api.github.com/users/groovecoder/repos","events_url":"https://api.github.com/users/groovecoder/events{/privacy}","received_events_url":"https://api.github.com/users/groovecoder/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/codesy/codesy/labels/django(-rest-framework)","name":"django(-rest-framework)","color":"0C4B33"}],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":0,"created_at":"2015-12-27T23:01:08Z","updated_at":"2015-12-27T23:01:08Z","closed_at":null,"body":"When we [change the widgets to use an iframe](https://github.com/codesy/widgets/issues/70#issuecomment-166118806), we need to add a `frame-ancestors github.com` CSP directive to all our responses, so our pages can only be `iframe`d on github.com to help [defend against Clickjacking attacks](https://www.owasp.org/index.php/Clickjacking_Defense_Cheat_Sheet)."}}