clickjacking
Sign in to savethumb|upright=1.35|In a clickjacking attack, the user is presented with a false interface, where their input is applied to something they cannot see. Clickjacking (classified as a user interface redress attack or UI redressing) is a malicious technique of tricking a user into clicking on something different from what the user perceives, thus potentially revealing confidential information or allowing others to take control of their computer while clicking on seemingly innocuous objects, including web pages.
Article
25 sectionsContents
- History
- Description
- Clickjacking categories
- Classic
- Likejacking
- Nested
- Cursorjacking
- MouseJack
- Browserless
- CookieJacking
- FileJacking
- Password manager attack
- Prevention
- Client-side
- NoScript
- NoClickjack
- GuardedID
- Gazelle
- Intersection Observer v2
- Server-side
- Framekiller
- X-Frame-Options
- Content Security Policy
- See also
- References
thumb|upright=1.35|In a clickjacking attack, the user is presented with a false interface, where their input is applied to something they cannot see. Clickjacking (classified as a user interface redress attack or UI redressing) is a malicious technique of tricking a user into clicking on something different from what the user perceives, thus potentially revealing confidential information or allowing others to take control of their computer while clicking on seemingly innocuous objects, including web pages.
Clickjacking is an instance of the confused deputy problem, wherein a computer is tricked into misusing its authority.