6 ms·
> turning it into another bug bounty eye-roller like ClickJacking When did clickjacking get mitigated by default by browsers? As far as I know it’s still up to
by minitech 7y ago
> turning it into another bug bounty eye-roller like ClickJacking
When did clickjacking get mitigated by default by browsers? As far as I know it’s still up to websites to prevent framing explicitly.
- tptacek 7y agoI'm not saying that CJ has been mitigated by default the way CSRF is poised to be, but rather that it's very rarely exploitable, which is soon to be the case for CSRF as well.