News for hackers. Stuff that matters.
Re:CSS-Only Clickjacking by franciscoapinto on Tuesday May 15, 2012 @08:57PM (#3979804)
This again?

Ah. Good old noscript.

http://i.imgur.com/Cb17T.png

Re:CSS-Only Clickjacking by Zarel on Tuesday May 15, 2012 @10:15PM (#3980050)
Hmm.

I don't know why `pointer-events:none` is being made a big deal of. In the past, it was easy enough just to put the Like button on top, and set its opacity to 0; all `pointer-events:none` does is make that easier.

More relevantly, we used clickjacking back in the day to do things like have custom Upload buttons (since it wasn't possible to finely style an `<input type="file">`). Does NoScript warn against that? (and should it?)