TLDR Dev · ARTICLES & TUTORIALS
SVG FILTERS - CLICKJACKING 2.0
Summary from the TLDR Dev newsletter
Clickjacking is a classic attack that involves covering up an iframe of some other website in an attempt to trick the user into unintentionally interacting with it. A new technique called SVG clickjacking turns classic clickjacking on its head. It enables the creation of complex interactive clickjacking attacks, as well as multiple forms of data exfiltration. This article takes a look at the technique and its various applications.