BugTraq
IE - cross site click detection? Apr 26 2005 05:31PM
ViPeR (viper31337 yahoo co in)
hi,

i stumbled upon a weird behaviour in IE, it
-indirectly- allows you to detect a mouse-click inside
another site - by placing an iframe between the
anchor-tags..

[snip]

<a href="javascript:alert('ALERT : You clicked inside
iframe!')">
<iframe
src="http://gmail.google.com/gmail/help/privacy.html"
frameborder="0" scrolling="no"

marginwidth="0" marginheight="0" style="border: 0px;
width: 100%; height: 100%;">
</iframe>
</a>

[/snip]

rgds,
Gregory R. Panakkal
http://www.crapware.tk

________________________________________________________________________

Yahoo! India Matrimony: Find your life partner online
Go to: http://yahoo.shaadi.com/india-matrimony

[ reply ]


 

Privacy Statement
Copyright 2010, SecurityFocus