From 12d9643e8bff0a876d7223725fae8c2decf6c2f0 2014-07-12 17:11:51
From: rgbkrk <rgbkrk@gmail.com>
Date: 2014-07-12 17:11:51
Subject: [PATCH] Incompatibility notice on iframe embedding

---

diff --git a/docs/source/whatsnew/pr/incompat-only-same-origin-iframe-embedding.rst b/docs/source/whatsnew/pr/incompat-only-same-origin-iframe-embedding.rst
new file mode 100644
index 0000000..7fc48a6
--- /dev/null
+++ b/docs/source/whatsnew/pr/incompat-only-same-origin-iframe-embedding.rst
@@ -0,0 +1,11 @@
+The IPython Notebook and its APIs by default will only be allowed to be
+embedded in an iframe on the same origin.
+
+To override this, set ``headers[X-Frame-Options]`` to one of
+
+* DENY
+* SAMEORIGIN
+* ALLOW-FROM uri
+
+See `Mozilla's guide to X-Frame-Options<https://developer.mozilla.org/en-US/docs/Web/HTTP/X-Frame-Options>`_ for more examples.
+