Re:Ask HN: Facebook clickjacking – is it detectable?
by mattmanser on Monday September 14, 2015 @09:18AM
(#10214882)
'Because it's slow' doesn't seem to make much sense to me. Couldn't they register the click then do the check, allowing them to have the best of both worlds?
[ Parent
| on HN ]
Re:Ask HN: Facebook clickjacking – is it detectable?
by socket0 on Monday September 14, 2015 @10:08AM
(#10215106)
It's JavaScript, so the client pays for it. If you're on an already slow browsers, you don't want to see it choke after you click on a button. So companies like Facebook ignore the problem on the client side, and solve it on the server side.