Web Hack List

Collected research

Strokejacking

Full Disclosure: ...because you can't get enough of clickjacking

The original disclosure of strokejacking. Clickjacking was assumed to be limited to single-click actions, but JavaScript focus semantics let a page shift focus between a hidden frame and the document a user is typing into, routing chosen keystrokes to the hidden target.

Record

Document
Full Disclosure: ...because you can't get enough of clickjacking
Researcher
Michal Zalewski
Published by
seclists.org
Topic
Other

In the archive

Tags

This page is the archive's own catalogue record. The research is the work of Michal Zalewski, first published at the original source. Preserved copies are kept so the citation survives its host; this one was last captured on .