Add a median filter to adversarial examples

Question

How do I to add a median filter to the examples after adding the FGSM in this function.

def fgsm_attack(image, epsilon, data_grad):
    sign_data