The Dangers of Clickjacking with Facebook. theharmonyguy compiled a list of actions that can be triggered on Facebook by a single click, and hence are vulnerable to clickjacking attacks. The list includes authorising malicious applications, posting links to profiles, sending friend requests and sending messages to other users. Why don’t Facebook include frame busting JavaScript on every page?
Sign in with 
OpenID
It'd be pretty hypocritical, given their framing of the entire web.
Also, it isn't clear that it's a winnable war:
http://stackoverflow.com/questions/958997/frame-bu ster-buster-buster-code-needed
Then again, maybe it's simple neglect.
Jeremy Dunck - 23rd December 2009 14:09 - #