Sirdarckcat just pinged me with some more Clickjacking stuff, including his own related work:
Regarding protection, if you’re a Firefox/NoScript user you should already know about ClearClick. If you’re not, I feel a bit sorry for you.
One Response to “More Clickjacking”Leave a Reply |
November 18th, 2008 at 4:36 pm
[…] NoScript 1.8.4 and above ship with ClearClick enabled on both untrusted and trusted sites. It works everywhere, even if you’ve got scripts globally allowed. And yes, at that point I had to change noscript.net install button, therefore if you want a PoC you need to look elsewhere. […]