<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<meta content="text/html;charset=ISO-8859-1" http-equiv="Content-Type">
</head>
<body bgcolor="#ffffff" text="#000000">
Peter Kasting wrote, On 05/04/2009 0.54:
<blockquote
cite="mid:d62cf1d10904041554v156848dfsf095e6a4153059fc@mail.gmail.com"
type="cite">
<pre wrap="">On Sat, Apr 4, 2009 at 12:56 PM, timeless <a class="moz-txt-link-rfc2396E" href="mailto:timeless@gmail.com"><timeless@gmail.com></a> wrote:
</pre>
<blockquote type="cite">
<pre wrap="">sounds like a security nightmare.
</pre>
</blockquote>
<pre wrap=""><!---->
Can you be less vague? We've had a number of security people vet this
already, so specific complaints would be very helpful.
PK</pre>
</blockquote>
It would make clickjacking attacks more precise, by exactly positioning
the frame content where the attacker wants it to be.<br>
Not that you cannot already be pixel-precise by using absolute
positioning inside an overflow: hidden div...<br>
Let's say it would make them even more script-kiddies friendly.<br>
--<br>
Giorgio Maone
</body>
</html>