| Main Archive Page > Month Archives > webappsec archives |
I've just published an interview with Jeremiah grossman on ClickJacking.
Looks as though CSRF token based protections may not be as safe as we thought...
Interview: Jeremiah Grossman provides more details on clickjacking attack http://www.cgisecurity.org/2008/10/interview-jerem.html
Regards,
- Robert
http://www.cgisecurity.com/
https://www.watchfire.com/securearea/whitepapers.aspx?id=70170000000940F