[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
IE - cross site click detection?
- To: bugtraq@xxxxxxxxxxxxxxxxx
- Subject: IE - cross site click detection?
- From: ViPeR <viper31337@xxxxxxxxxxx>
- Date: Tue, 26 Apr 2005 18:31:41 +0100 (BST)
hi,
i stumbled upon a weird behaviour in IE, it
-indirectly- allows you to detect a mouse-click inside
another site - by placing an iframe between the
anchor-tags..
[snip]
<a href="javascript:alert('ALERT : You clicked inside
iframe!')">
<iframe
src="http://gmail.google.com/gmail/help/privacy.html"
frameborder="0" scrolling="no"
marginwidth="0" marginheight="0" style="border: 0px;
width: 100%; height: 100%;">
</iframe>
</a>
[/snip]
rgds,
Gregory R. Panakkal
http://www.crapware.tk
________________________________________________________________________
Yahoo! India Matrimony: Find your life partner online
Go to: http://yahoo.shaadi.com/india-matrimony