Clickjacking:
http://www.webmonkey.com/blog/A_Look...u_Should_Worry
Printable View
Clickjacking:
http://www.webmonkey.com/blog/A_Look...u_Should_Worry
Interesting....
If you use Firefox and the NoScript extension, you can have protection against Clickjacking beginning with NoScript version 1.8.2.1
http://noscript.net/
I saw a demo of this and it just looks like an overlay of a page (And the browser allows the exploit by LEAKING data from 1 page thru to the other)
Video: http://www.youtube.com/v/gxyLbpldmuU
Clickjacking
I am told that Firefox browsers can get a level of protection against clipjacking by "disabling Active-X."
Can someone please confirm that?
What is Active-X; how can I tell if I have it installed (in my W98, W98Se, and Xp browsers); and how do I disable it?
Thanks.
support.mozilla.com: ActiveX
http://support.mozilla.com/en-US/kb/ActiveXQuote:
Currently, there is no mechanism by which you can use ActiveX controls in Firefox 2.0 or later.
Until recently, a third-party plugin provided ActiveX functionality for Firefox. The Mozilla ActiveX Plug-in provided partial ActiveX support for Firefox 1.5 and earlier versions. By default, these ActiveX plugins were configured to execute only the two Windows Media Player ActiveX controls, which enabled the playback of video content through the Windows controls. There is a configuration file that can be used to enable other ActiveX controls. For details, see Adam Lock's site.
The plugins for Netscape, Mozilla Suite, and Mozilla Firefox were created by Adam Lock and are maintained on his site, which has not been updates since 2005. These plugins do not work with Firefox 2.0 or later.
- For more information, see Adam Lock's Mozilla ActiveX Project.
I posted more info above the above issue: http://www.computerhope.com/forum/in...c,68584.0.html