Collected research
SVG Filters - Clickjacking 2.0
SVG clickjacking
SVG filters still apply to cross-origin iframes, and tiling, blending and compositing primitives can crop single pixels of the framed page and combine them into logic gates. An overlay can then read the framed application's state and react to it, making multi-step clickjacking with fake dialogs practical, and exfiltrating read pixels as a scannable code.
Record
- Document
- SVG clickjacking
- Researcher
- rebane2001
- Published by
- lyra's epic blog
- Date
- Topic
- Browser
In the archive
Related sources
Tags
This page is the archive's own catalogue record. The research is the work of rebane2001, first published at the original source. Preserved copies are kept so the citation survives its host; this one was last captured on .