2 ms·
HTML and CSS alone allow you to concoct a webpage where a user's input appears to be going to one place but is in fact going somewhere else. https://en.wikiped
by shadowgovt 4y ago
HTML and CSS alone allow you to concoct a webpage where a user's input appears to be going to one place but is in fact going somewhere else.
https://en.wikipedia.org/wiki/Framekiller https://en.wikipedia.org/wiki/Framekiller
- ndriscoll 4y agoThe OP link is a browser that doesn't support CSS. Not supporting frames seems like it'd also solve that problem. Edit: also, in a modern browser, passwords are autofilled by the browser which knows where input is going and can't be tricked. You could make an argument about other sensitive information, but that sounds like it's the same as plain ol' phishing.
- shadowgovt 4y agoAgreed. Unfortunately, there's no language for querying the client "Do you support CSS" / "Do you support frames" without CSS so Google is forced to err on the side of caution and reject browser that don't support JS (because they can query that).