{"action":"closed","issue":{"url":"https://api.github.com/repos/ampproject/amphtml/issues/2952","repository_url":"https://api.github.com/repos/ampproject/amphtml","labels_url":"https://api.github.com/repos/ampproject/amphtml/issues/2952/labels{/name}","comments_url":"https://api.github.com/repos/ampproject/amphtml/issues/2952/comments","events_url":"https://api.github.com/repos/ampproject/amphtml/issues/2952/events","html_url":"https://github.com/ampproject/amphtml/issues/2952","id":149885328,"number":2952,"title":"AMP tag doesn't render correctly in a sandbox-ed iframe","user":{"login":"congyun","id":490849,"avatar_url":"https://avatars.githubusercontent.com/u/490849?v=3","gravatar_id":"","url":"https://api.github.com/users/congyun","html_url":"https://github.com/congyun","followers_url":"https://api.github.com/users/congyun/followers","following_url":"https://api.github.com/users/congyun/following{/other_user}","gists_url":"https://api.github.com/users/congyun/gists{/gist_id}","starred_url":"https://api.github.com/users/congyun/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/congyun/subscriptions","organizations_url":"https://api.github.com/users/congyun/orgs","repos_url":"https://api.github.com/users/congyun/repos","events_url":"https://api.github.com/users/congyun/events{/privacy}","received_events_url":"https://api.github.com/users/congyun/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/ampproject/amphtml/labels/Needs%20Reproduction","name":"Needs Reproduction","color":"006b75"},{"url":"https://api.github.com/repos/ampproject/amphtml/labels/Priority:%20High","name":"Priority: High","color":"eb6420"},{"url":"https://api.github.com/repos/ampproject/amphtml/labels/Related%20to:%20Content","name":"Related to: Content","color":"d4c5f9"},{"url":"https://api.github.com/repos/ampproject/amphtml/labels/Type:%20Bug","name":"Type: Bug","color":"f7c6c7"}],"state":"closed","locked":false,"assignee":{"login":"zhouyx","id":5419904,"avatar_url":"https://avatars.githubusercontent.com/u/5419904?v=3","gravatar_id":"","url":"https://api.github.com/users/zhouyx","html_url":"https://github.com/zhouyx","followers_url":"https://api.github.com/users/zhouyx/followers","following_url":"https://api.github.com/users/zhouyx/following{/other_user}","gists_url":"https://api.github.com/users/zhouyx/gists{/gist_id}","starred_url":"https://api.github.com/users/zhouyx/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/zhouyx/subscriptions","organizations_url":"https://api.github.com/users/zhouyx/orgs","repos_url":"https://api.github.com/users/zhouyx/repos","events_url":"https://api.github.com/users/zhouyx/events{/privacy}","received_events_url":"https://api.github.com/users/zhouyx/received_events","type":"User","site_admin":false},"assignees":[{"login":"zhouyx","id":5419904,"avatar_url":"https://avatars.githubusercontent.com/u/5419904?v=3","gravatar_id":"","url":"https://api.github.com/users/zhouyx","html_url":"https://github.com/zhouyx","followers_url":"https://api.github.com/users/zhouyx/followers","following_url":"https://api.github.com/users/zhouyx/following{/other_user}","gists_url":"https://api.github.com/users/zhouyx/gists{/gist_id}","starred_url":"https://api.github.com/users/zhouyx/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/zhouyx/subscriptions","organizations_url":"https://api.github.com/users/zhouyx/orgs","repos_url":"https://api.github.com/users/zhouyx/repos","events_url":"https://api.github.com/users/zhouyx/events{/privacy}","received_events_url":"https://api.github.com/users/zhouyx/received_events","type":"User","site_admin":false}],"milestone":{"url":"https://api.github.com/repos/ampproject/amphtml/milestones/16","html_url":"https://github.com/ampproject/amphtml/milestones/Sprint:%202016-04-28","labels_url":"https://api.github.com/repos/ampproject/amphtml/milestones/16/labels","id":1675099,"number":16,"title":"Sprint: 2016-04-28","description":"","creator":{"login":"rudygalfi","id":3888212,"avatar_url":"https://avatars.githubusercontent.com/u/3888212?v=3","gravatar_id":"","url":"https://api.github.com/users/rudygalfi","html_url":"https://github.com/rudygalfi","followers_url":"https://api.github.com/users/rudygalfi/followers","following_url":"https://api.github.com/users/rudygalfi/following{/other_user}","gists_url":"https://api.github.com/users/rudygalfi/gists{/gist_id}","starred_url":"https://api.github.com/users/rudygalfi/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/rudygalfi/subscriptions","organizations_url":"https://api.github.com/users/rudygalfi/orgs","repos_url":"https://api.github.com/users/rudygalfi/repos","events_url":"https://api.github.com/users/rudygalfi/events{/privacy}","received_events_url":"https://api.github.com/users/rudygalfi/received_events","type":"User","site_admin":false},"open_issues":0,"closed_issues":13,"state":"closed","created_at":"2016-03-30T23:31:17Z","updated_at":"2016-10-21T16:08:40Z","due_on":"2016-04-28T07:00:00Z","closed_at":"2016-04-29T23:08:33Z"},"comments":15,"created_at":"2016-04-20T21:02:26Z","updated_at":"2016-10-21T16:08:40Z","closed_at":"2016-10-21T16:08:40Z","body":"AMP tag doesn't render in a sandbox-ed iframe.\r\n\r\n## Description\r\n\r\nFor security issue, we need put amp tagged snippet into a sandbox-ed iframe. We've included the amp runtime js: \"https://cdn.ampproject.org/v0.js\" as a script into the iframe content, yet the amp tags, for example, amp-img cannot render in the sandbox-ed iframe except we put \"allow-same-origin\" into the sandbox attribute.\r\n\r\n## How do we reproduce the issue?\r\nAs there are 2 files needed, jsbin cannot show it correctly...I attached the two files here. To reproduce, open \"amptestParent.html\" and click \"Go\". The amp-img is not rendered as it's in an iframe. \r\n\r\n[AMPTest.zip](https://github.com/ampproject/amphtml/files/228810/AMPTest.zip)\r\n\r\n## What browsers are affected?\r\n\r\nAll browsers.\r\n\r\n## Which AMP version is affected?\r\n\r\nI think this is an existing issue for the latest amp version. I'm using the runtime JS directly from CDN. "}}
{"actor":{"display_login":"cramforce"}}