6 ms·
The Google OAuth attack is pretty sneaky indeed. I noticed the popup being created, positioned, and hidden upon the first click but I highly doubt most regular
by chime 15y ago
The Google OAuth attack is pretty sneaky indeed. I noticed the popup being created, positioned, and hidden upon the first click but I highly doubt most regular users would. I wish there was an option in Chrome to force new tabs to be opened instead of new windows and to completely disable popups for all sites, always. I can't think of any reason why a site needs popup anymore, especially since IFrames, OAuth, LightBox, JSONP etc. can handle pretty much all the rich-media use cases.
- mvzink 15y agoI agree. But on the other hand, lightbox style advertisements are just popups that you have to actually click to close, instead of command-W.
- maxwell 15y agoSolved in ChromeOS.
- sid0 15y agoJust use Firefox with browser.link.open_newwindow.restriction = 0?
- icebraining 15y agoYeah, here FF just opened a new tab ("Clickjacking is asking to..."). Well, no, actually it just showed the instructions - NoScript is awesome - but after I enabled scripts, it opened the tab.