clickjacking
Sign in to saveAlso known as tapjacking, Improper Restriction of Rendered UI Layers or Frames
thumb|upright=1.35|In a clickjacking attack, the user is presented with a false interface, where their input is applied to something they cannot see. Clickjacking (classified as a user interface redress attack or UI redressing) is a malicious technique of tricking a user into clicking on something different from what the user perceives, thus potentially revealing confidential information or allowing others to take control of their computer while clicking on seemingly innocuous objects, including web pages.
Wikidata facts
- Image
- Clickjacking.png
Show 1 more fact
- Stack Exchange tag
- security.stackexchange.com/tags/clickjacking
via Wikidata · CC0
~14 min read
Article
25 sectionsContents
- History
- Description
- Clickjacking categories
- Classic
- Likejacking
- Nested
- Cursorjacking
- MouseJack
- Browserless
- CookieJacking
- FileJacking
- Password manager attack
- Prevention
- Client-side
- NoScript
- NoClickjack
- GuardedID
- Gazelle
- Intersection Observer v2
- Server-side
- Framekiller
- X-Frame-Options
- Content Security Policy
- See also
- References
thumb|upright=1.35|In a clickjacking attack, the user is presented with a false interface, where their input is applied to something they cannot see. Clickjacking (classified as a user interface redress attack or UI redressing) is a malicious technique of tricking a user into clicking on something different from what the user perceives, thus potentially revealing confidential information or allowing others to take control of their computer while clicking on seemingly innocuous objects, including web pages.
Clickjacking is an instance of the confused deputy problem, wherein a computer is tricked into misusing its authority.