Slashdot Mirror

← Back to Stories (view on slashdot.org)

Busting, and Fixing, Frame Busting

Posted by kdawson on from the don't-frame-me-bro dept.

An anonymous reader writes "A study presented last week at the IEEE Web Security and Privacy workshop shows that frame busting code used at popular websites is easily circumvented. Frame busting is a widely used technique to prevent clickjacking attacks. The researchers propose better frame busting code and suggest that websites migrate to this new code."

1 of 111 comments (clear)

  1. Same Origin Policy by tepples · · Score: 4, Informative

    Agreed, frames are the scourge of the web, obliterate them from the universe immediately.

    Whereas a DIV that floats annoyingly around your page with content loaded from an external source is perfectly okay, because it's ... ? In the HTML spec ?

    Unlike frames, the XMLHttpRequest to get the content into the DIV is restricted by the Same Origin Policy.