Don't have an account? Sign up
If you're already signed up, please sign in
Clickjacking — a user-interface attack that overlays or disguises elements to make a user click a different target than intended.
The vulnerability arises when an application trusts unvalidated input, a request, a traffic source, or a network channel. Impact depends on the attack surface and can include code execution, session theft, data modification, or denial of service.
Clickjacking — a user-interface attack that overlays or disguises elements to make a user click a different target than intended.
An attacker crafts data or traffic so an application, browser, database, or user performs an unintended action. The exact path depends on the vulnerability type.
Use input validation and contextual output encoding, parameterized queries, session protection, least privilege, updates, rate controls, a WAF, and monitoring. No single filter replaces secure development.
