Comments on: Ehy IE8, I Can Has Some Clickjacking Protection? http://hackademix.net/2009/01/27/ehy-ie8-i-can-has-some-clickjacking-protection/ Giorgio Maone's answers to the Web, the Universe, and Everything Wed, 08 Feb 2012 12:25:02 +0000 http://wordpress.org/?v=2.2.3 By: Giorgio http://hackademix.net/2009/01/27/ehy-ie8-i-can-has-some-clickjacking-protection/#comment-13370 Giorgio Fri, 19 Jun 2009 15:30:56 +0000 http://hackademix.net/2009/01/27/ehy-ie8-i-can-has-some-clickjacking-protection/#comment-13370 @<a href="http://hackademix.net/2009/01/27/ehy-ie8-i-can-has-some-clickjacking-protection/#comment-13364" rel="nofollow">Jeff Atwood</a>: <strong>My</strong> users are protected by NoScript :D Anyway, what about this one: <code> if (top != self) { top.location.replace(location); location.replace("about:blank"); // want me framed? no way! } </code> Seen <a href="http://stackoverflow.com/questions/958997/frame-buster-buster-buster-code-needed/1018574#1018574" target="_blank" rel="nofollow external" rel="nofollow">here</a> ;) @Jeff Atwood:
My users are protected by NoScript :D

Anyway, what about this one:

if (top != self) {
top.location.replace(location);
location.replace(”about:blank”); // want me framed? no way!
}

Seen here ;)

]]> By: Jeff Atwood http://hackademix.net/2009/01/27/ehy-ie8-i-can-has-some-clickjacking-protection/#comment-13364 Jeff Atwood Fri, 19 Jun 2009 06:41:29 +0000 http://hackademix.net/2009/01/27/ehy-ie8-i-can-has-some-clickjacking-protection/#comment-13364 "To sum up, there’s always been a well known and accepted server-side protection option which works everywhere except in IE." Um, no. And if you believe that framebusting can't be defeated, then your users are going to get owned. http://www.codinghorror.com/blog/archives/001277.html "To sum up, there’s always been a well known and accepted server-side protection option which works everywhere except in IE."

Um, no. And if you believe that framebusting can’t be defeated, then your users are going to get owned.

http://www.codinghorror.com/blog/archives/001277.html

]]> By: noam http://hackademix.net/2009/01/27/ehy-ie8-i-can-has-some-clickjacking-protection/#comment-11134 noam Sun, 22 Feb 2009 07:17:41 +0000 http://hackademix.net/2009/01/27/ehy-ie8-i-can-has-some-clickjacking-protection/#comment-11134 i installed a web application firewall- software solution. it protects layer 7, web applications. but how can i know if it protects also against clickjacking? http://www.applicure.com i installed a web application firewall- software solution. it protects layer 7, web applications. but how can i know if it protects also against clickjacking? http://www.applicure.com

]]> By: IE8.0 and Clickjacking | Secdefence.Com http://hackademix.net/2009/01/27/ehy-ie8-i-can-has-some-clickjacking-protection/#comment-11058 IE8.0 and Clickjacking | Secdefence.Com Thu, 19 Feb 2009 01:15:24 +0000 http://hackademix.net/2009/01/27/ehy-ie8-i-can-has-some-clickjacking-protection/#comment-11058 [...] sure you’ve heard about the new IE8.0 Clickjacking protection here, here and probably most importantly here on the IE blog. It’s probably time I explain exactly [...] […] sure you’ve heard about the new IE8.0 Clickjacking protection here, here and probably most importantly here on the IE blog. It’s probably time I explain exactly […]

]]> By: Cross Site Scripting » Blog Archive » Hackademix.Net » Ehy Ie8, I Can has Some Clickjacking Protection? http://hackademix.net/2009/01/27/ehy-ie8-i-can-has-some-clickjacking-protection/#comment-10687 Cross Site Scripting » Blog Archive » Hackademix.Net » Ehy Ie8, I Can has Some Clickjacking Protection? Fri, 30 Jan 2009 16:47:14 +0000 http://hackademix.net/2009/01/27/ehy-ie8-i-can-has-some-clickjacking-protection/#comment-10687 [...] We’ve been preaching about XSS holes and other web programming errors for years, but developers still fall in the same pitfalls over and over again: if the guys in Redmond really believed that web security could be fixed …$anchor_text[$anchor_choice] [...] […] We’ve been preaching about XSS holes and other web programming errors for years, but developers still fall in the same pitfalls over and over again: if the guys in Redmond really believed that web security could be fixed …$anchor_text[$anchor_choice] […]

]]> By: La billeterie » Blog Archive » Clickjacking http://hackademix.net/2009/01/27/ehy-ie8-i-can-has-some-clickjacking-protection/#comment-10686 La billeterie » Blog Archive » Clickjacking Fri, 30 Jan 2009 15:32:59 +0000 http://hackademix.net/2009/01/27/ehy-ie8-i-can-has-some-clickjacking-protection/#comment-10686 [...] http://hackademix.net/2009/01/27/ehy-ie8-i-can-has-some-clickjacking-protection/ Convenience is number one factor in keeping browsers secure [...] […] http://hackademix.net/2009/01/27/ehy-ie8-i-can-has-some-clickjacking-protection/ Convenience is number one factor in keeping browsers secure […]

]]> By: IE8.0 and Clickjacking « Covil Inc. http://hackademix.net/2009/01/27/ehy-ie8-i-can-has-some-clickjacking-protection/#comment-10685 IE8.0 and Clickjacking « Covil Inc. Fri, 30 Jan 2009 15:21:40 +0000 http://hackademix.net/2009/01/27/ehy-ie8-i-can-has-some-clickjacking-protection/#comment-10685 [...] sure you’ve heard about the new IE8.0 Clickjacking protection here, here and probably most importantly here on the IE blog. It’s probably time I explain exactly [...] […] sure you’ve heard about the new IE8.0 Clickjacking protection here, here and probably most importantly here on the IE blog. It’s probably time I explain exactly […]

]]> By: hackademix.net » X-IFRAME-OPTIONS in Firefox http://hackademix.net/2009/01/27/ehy-ie8-i-can-has-some-clickjacking-protection/#comment-10673 hackademix.net » X-IFRAME-OPTIONS in Firefox Fri, 30 Jan 2009 00:12:15 +0000 http://hackademix.net/2009/01/27/ehy-ie8-i-can-has-some-clickjacking-protection/#comment-10673 [...] I promised in my previous posts about so called IE8’s “Clickjacking protection”, some hours ago I released the [...] […] I promised in my previous posts about so called IE8’s “Clickjacking protection”, some hours ago I released the […]

]]> By: Fenixnordic Group » Blog Archive » Why IE8’s ‘ClickJacking’ Solution Won’t Help Most Users http://hackademix.net/2009/01/27/ehy-ie8-i-can-has-some-clickjacking-protection/#comment-10670 Fenixnordic Group » Blog Archive » Why IE8’s ‘ClickJacking’ Solution Won’t Help Most Users Thu, 29 Jan 2009 18:46:53 +0000 http://hackademix.net/2009/01/27/ehy-ie8-i-can-has-some-clickjacking-protection/#comment-10670 [...] Giorgio Maone, the developer behind Firefox’s NoScript Add-on, explains "there’s always been a well known and accepted server-side protection option which works [...] […] Giorgio Maone, the developer behind Firefox’s NoScript Add-on, explains "there’s always been a well known and accepted server-side protection option which works […]

]]> By: Clickjacking: Internet Explorer 8 non è immune, dicono - The New Blog Times http://hackademix.net/2009/01/27/ehy-ie8-i-can-has-some-clickjacking-protection/#comment-10660 Clickjacking: Internet Explorer 8 non è immune, dicono - The New Blog Times Wed, 28 Jan 2009 23:00:42 +0000 http://hackademix.net/2009/01/27/ehy-ie8-i-can-has-some-clickjacking-protection/#comment-10660 [...] Giorgio Maone, che di NoScript è l’autore, in un suo dettagliatissimo e circostanziato post nel suo [...] […] Giorgio Maone, che di NoScript è l’autore, in un suo dettagliatissimo e circostanziato post nel suo […]

]]>