Other nomination
CSS-Only Clickjacking
A JSFiddle proof of concept for clickjacking with CSS alone: a visible link is positioned over a Facebook Like or Twitter Follow iframe and given pointer-events: none, so the click passes through to the hidden button. The archived copy is the fiddle's HTML and CSS panels, including a second row that tints the overlays red to show the trick.
Record
- Researcher
- @gcollazo
In the archive
Tags
This page is the archive's own catalogue record. The research is the work of @gcollazo, first published at the original source. Preserved copies are kept so the citation survives its host.