begood Posted May 21, 2010 Report Posted May 21, 2010 Web framing attacks such as clickjacking use iframes to hijack a user's web session. The most common defense, called frame busting, prevents a site from functioning when loaded inside a frame. We study frame busting practices for the Alexa Top-500 sites and show that all can be circumvented in one way or another. Some circumventions are browser-specific while others work across browsers. We conclude with recommendations for proper frame busting. A research question: this page contains our proposed Javascript frame busting code. This code resists the attacks in the paper, but we cannot guarantee that the page cannot be framed. If you are able to write HTML that frames this page, please send us a link. Busting frame busting: a study of clickjacking vulnerabilities at popular sites [bIBTEX] Gustav Rydstedt, Elie Bursztein, Dan Boneh, and Collin Jackson in IEEE Oakland Web 2.0 Security and Privacy (W2SP'10)Busting frame busting Quote
