News for hackers. Stuff that matters.

A comment on Ask HN: Facebook clickjacking – is it detectable?. Parent comment

Re:Ask HN: Facebook clickjacking – is it detectable? by MasterScrat on Monday September 14, 2015 @09:08AM (#10214843)
Couldn't an attacker override window.getComputedStyle() at runtime anyway?
[ Parent | on HN ]
Re:Ask HN: Facebook clickjacking – is it detectable? by socket0 on Monday September 14, 2015 @10:15AM (#10215140)
Presumably Facebook would have CSP headers set on some of the scripts they load to prevent JavaScript on the page from interacting with their own scripts.
[ Parent | on HN ]