{"action":"created","issue":{"url":"https://api.github.com/repos/ember-cli/ember-twiddle/issues/99","labels_url":"https://api.github.com/repos/ember-cli/ember-twiddle/issues/99/labels{/name}","comments_url":"https://api.github.com/repos/ember-cli/ember-twiddle/issues/99/comments","events_url":"https://api.github.com/repos/ember-cli/ember-twiddle/issues/99/events","html_url":"https://github.com/ember-cli/ember-twiddle/issues/99","id":98074337,"number":99,"title":"Should the iframe point to a different domain?","user":{"login":"phkavitha","id":2657473,"avatar_url":"https://avatars.githubusercontent.com/u/2657473?v=3","gravatar_id":"","url":"https://api.github.com/users/phkavitha","html_url":"https://github.com/phkavitha","followers_url":"https://api.github.com/users/phkavitha/followers","following_url":"https://api.github.com/users/phkavitha/following{/other_user}","gists_url":"https://api.github.com/users/phkavitha/gists{/gist_id}","starred_url":"https://api.github.com/users/phkavitha/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/phkavitha/subscriptions","organizations_url":"https://api.github.com/users/phkavitha/orgs","repos_url":"https://api.github.com/users/phkavitha/repos","events_url":"https://api.github.com/users/phkavitha/events{/privacy}","received_events_url":"https://api.github.com/users/phkavitha/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":11,"created_at":"2015-07-30T02:50:44Z","updated_at":"2015-07-30T15:08:36Z","closed_at":null,"body":"Firstly, the app is really cool. Hats off!!\r\n\r\nIn order to prevent XSS attacks and other security issues, should the iframe in ember-twiddle point to a different domain? Similar to JSFiddle. Currently, we can access the parent window from the iframe code and can access the browser cookies as well.  \r\n\r\nCorrect me if my understanding is wrong. "},"comment":{"url":"https://api.github.com/repos/ember-cli/ember-twiddle/issues/comments/126364906","html_url":"https://github.com/ember-cli/ember-twiddle/issues/99#issuecomment-126364906","issue_url":"https://api.github.com/repos/ember-cli/ember-twiddle/issues/99","id":126364906,"user":{"login":"stefanpenner","id":1377,"avatar_url":"https://avatars.githubusercontent.com/u/1377?v=3","gravatar_id":"","url":"https://api.github.com/users/stefanpenner","html_url":"https://github.com/stefanpenner","followers_url":"https://api.github.com/users/stefanpenner/followers","following_url":"https://api.github.com/users/stefanpenner/following{/other_user}","gists_url":"https://api.github.com/users/stefanpenner/gists{/gist_id}","starred_url":"https://api.github.com/users/stefanpenner/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/stefanpenner/subscriptions","organizations_url":"https://api.github.com/users/stefanpenner/orgs","repos_url":"https://api.github.com/users/stefanpenner/repos","events_url":"https://api.github.com/users/stefanpenner/events{/privacy}","received_events_url":"https://api.github.com/users/stefanpenner/received_events","type":"User","site_admin":false},"created_at":"2015-07-30T15:08:36Z","updated_at":"2015-07-30T15:08:36Z","body":"@hjdivad is likely a good person to pull in, as he has done copious work with iframes postMessage/messageChannel"}}