Collected research

Popup & Focus URL Hijacking

Popup & Focus URL Hijacking ha.ckers.org web application security lab

A snippet replaces the page shortly after load, so the address bar a user checked no longer matches what they see. Applied to a download prompt, a page posing as addons.mozilla.org triggers a Firefox add-on install dialog that names ha.ckers.org as the source, and blocks the legitimate download until the user acts.

Record

Document

Popup & Focus URL Hijacking ha.ckers.org web application security lab

Published by

ha.ckers.org

Topic

Other

In the archive

• Collected in the 2009 research round
• Collected in the 2010 research round

Related sources

• Popup Focus URL Hijacking

Tags

• ui-redress
• javascript
• browser-extension
• attack-chain
• url-spoofing
• owasp-a04-2021

This page is the archive's own catalogue record. The research is the work of ha.ckers.org, first published at the original source. Preserved copies are kept so the citation survives its host; this one was last captured on 9 August 2026.