A malicious site will load your site in an iframe, fill in your form and post it. I browser cannot do this. The OP probably saw some exploit code in an ad whic

A malicious site will load your site in an iframe, fill in your form and post it. I browser cannot do this. The OP probably saw some exploit code in an ad which was served in an IFrame, but the same-domain security model will not allow you to interact with another window or IFrame that is of a different domain.