clickjacking
English edit
Etymology edit
Blend of click + hijacking, coined by Jeremiah Grossman and Robert Hansen in 2008.
Pronunciation edit
Audio (UK) (file)
Noun edit
clickjacking (uncountable)
- (computing, web development) A malicious technique whereby part of a webpage is covered by transparent or misleading content that receives the user’s mouse clicks, thus causing them to execute commands they did not intend.
- 2008 September 12, Jeremiah Grossman, Robert Hansen, “OWASP NYC AppSec 2008 Conference”, in OWASP[1], archived from the original on 2016-09-13:
- New 0-Day Browser Exploits Clickjacking - yea, this is bad... Jeremiah Grossman & Robert "RSnake" Hansen
- 2008 September 12, Robert Hansen, Jeremiah Grossman, “Clickjacking”, in SecTheory - Internet Security Services Internet Security[2], archived from the original on 29 October 2008:
- Clickjacking, however, evades the need for this cross domain reading, and instead directly places the mouse over the target area to click on the link or form that contains the nonce - thereby bypassing the need for client side cross domain read exploitation.