New issue 874: Security Considerations https://bitbucket.org/openid/connect/issue/874/security-considerations Nat Sakimura: We mention Frame Busting. We probably should call out X-Frame Header as well.