Using ClickJacking Correctly

Ask for help about NoScript, no registration needed to post
asloane
Posts: 5
Joined: Tue Jun 15, 2010 5:13 pm

Using ClickJacking Correctly

Post by asloane »

If I untick any of the options in the NoScript ClickJacking panel which is displayed during a ClickJack, will the sites involved be permanently whitelisted or is the allowance only temporary?

If a site was allow to ClickJack would it appear in the NoScript Whitelist?

I can only find one Whitelist, which I assumed was for generally allowing javascript and not for ClickJacking. Please correct me if wrong.
Mozilla/5.0 (Windows NT 6.1; WOW64; rv:17.0) Gecko/20100101 Firefox/17.0
User avatar
Thrawn
Master Bug Buster
Posts: 3106
Joined: Mon Jan 16, 2012 3:46 am
Location: Australia
Contact:

Re: Using ClickJacking Correctly

Post by Thrawn »

What site is involved? If it's a false positive, then Giorgio will want to know, and if it can't be worked around by refining NoScript, then the site owner should be informed that their site design is bad.

You are correct, there is only a whitelist for javascript. Clickjacking shouldn't need a whitelist, because it shouldn't happen on legitimate sites.
======
Thrawn
------------
Religion is not the opium of the masses. Daily life is the opium of the masses.

True religion, which dares to acknowledge death and challenge the way we live, is an attempt to wake up.
Mozilla/5.0 (Linux; U; Android 2.3.6; en-au; GT-S5830 Build/GINGERBREAD) AppleWebKit/533.1 (KHTML, like Gecko) Version/4.0 Mobile Safari/533.1
Post Reply