clickjacking

English

Etymology

Blend of click +‎ hijacking, coined by Jeremiah Grossman and Robert Hansen in 2008.

Pronunciation

• Audio (UK):

  (file)

Noun

clickjacking (uncountable)

1. (computing, web development) A malicious technique whereby part of a webpage is covered by transparent or misleading content that receives the user’s mouse clicks, thus causing them to execute commands they did not intend.
   • 2008 September 12, Jeremiah Grossman, Robert Hansen, “OWASP NYC AppSec 2008 Conference”, in OWASP‎^[1], archived from the original on 2016-09-13:

     New 0-Day Browser Exploits Clickjacking - yea, this is bad... Jeremiah Grossman & Robert "RSnake" Hansen

   • 2008 September 12, Robert Hansen, Jeremiah Grossman, “Clickjacking”, in SecTheory - Internet Security Services Internet Security‎^[2], archived from the original on 29 October 2008:

     Clickjacking, however, evades the need for this cross domain reading, and instead directly places the mouse over the target area to click on the link or form that contains the nonce - thereby bypassing the need for client side cross domain read exploitation.

Related terms

• scrolljacking