Description
The JavaScript implementation in WebKit allows remote attackers to send selected keystrokes to a form field in a hidden frame, instead of the intended form field in a visible frame, via certain calls to the focus method.
References
- 43068 third-party-advisory
- ADV-2011-0212 vdb-entry
- https://bugzilla.mozilla.org/show_bug.cgi?id=552255
- SUSE-SR:2011:002 vendor-advisory
- 20100313 ...because you can't get enough of clickjacking mailing-list