X-Frame-Options header issue

[ideakitchn]

A lot of ecommerce sites use the header for 'X-Frame-Options' set to 'sameorigin' to guard against clickjacking. And because ish. runs a site in an iframe that header value does not allow ish to run. To test this, use https://www.amazon.com as the site and view the console message in Chrome Dev Tools.

[bradfrost]

Yep this is an issue. I'll take a look at some of these Stack Overflow threads: http://stackoverflow.com/questions/6666423/overcoming-display-forbidden-by-x-frame-options

and see what I can do about this.