{"action":"created","issue":{"url":"https://api.github.com/repos/forkcms/forkcms/issues/1241","labels_url":"https://api.github.com/repos/forkcms/forkcms/issues/1241/labels{/name}","comments_url":"https://api.github.com/repos/forkcms/forkcms/issues/1241/comments","events_url":"https://api.github.com/repos/forkcms/forkcms/issues/1241/events","html_url":"https://github.com/forkcms/forkcms/issues/1241","id":88760445,"number":1241,"title":"X-Frame-Options deny","user":{"login":"jacob-v-dam","id":310526,"avatar_url":"https://avatars.githubusercontent.com/u/310526?v=3","gravatar_id":"","url":"https://api.github.com/users/jacob-v-dam","html_url":"https://github.com/jacob-v-dam","followers_url":"https://api.github.com/users/jacob-v-dam/followers","following_url":"https://api.github.com/users/jacob-v-dam/following{/other_user}","gists_url":"https://api.github.com/users/jacob-v-dam/gists{/gist_id}","starred_url":"https://api.github.com/users/jacob-v-dam/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/jacob-v-dam/subscriptions","organizations_url":"https://api.github.com/users/jacob-v-dam/orgs","repos_url":"https://api.github.com/users/jacob-v-dam/repos","events_url":"https://api.github.com/users/jacob-v-dam/events{/privacy}","received_events_url":"https://api.github.com/users/jacob-v-dam/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":1,"created_at":"2015-06-16T15:30:11Z","updated_at":"2015-06-16T15:38:19Z","closed_at":null,"body":"Why are in the new version **X-Frame-Options** to **deny** and not to **SAMEORIGIN**?\r\n\r\nIf you want to load a iFrame to an internal page this would cause an error."},"comment":{"url":"https://api.github.com/repos/forkcms/forkcms/issues/comments/112474270","html_url":"https://github.com/forkcms/forkcms/issues/1241#issuecomment-112474270","issue_url":"https://api.github.com/repos/forkcms/forkcms/issues/1241","id":112474270,"user":{"login":"WouterSioen","id":1398405,"avatar_url":"https://avatars.githubusercontent.com/u/1398405?v=3","gravatar_id":"","url":"https://api.github.com/users/WouterSioen","html_url":"https://github.com/WouterSioen","followers_url":"https://api.github.com/users/WouterSioen/followers","following_url":"https://api.github.com/users/WouterSioen/following{/other_user}","gists_url":"https://api.github.com/users/WouterSioen/gists{/gist_id}","starred_url":"https://api.github.com/users/WouterSioen/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/WouterSioen/subscriptions","organizations_url":"https://api.github.com/users/WouterSioen/orgs","repos_url":"https://api.github.com/users/WouterSioen/repos","events_url":"https://api.github.com/users/WouterSioen/events{/privacy}","received_events_url":"https://api.github.com/users/WouterSioen/received_events","type":"User","site_admin":false},"created_at":"2015-06-16T15:38:19Z","updated_at":"2015-06-16T15:38:19Z","body":"Why would you want to load an iframe to an internal page in the first time ;)\r\n\r\nThe deny is the best practice provided by the OWASP security list."}}