3 ms·
According to this http://stackoverflow.com/q/7328295/413180 http://stackoverflow.com/q/7328295/413180 there's no known way to prevent both Clickjacking and CSRF
by timewarp256 11y ago
According to this http://stackoverflow.com/q/7328295/413180 http://stackoverflow.com/q/7328295/413180 there's no known way to prevent both Clickjacking and CSRF at the same time in a widget - unless you have an ugly popup asking the user to confirm the like.