Web Security · Junior · Question 68 of 75

What is clickjacking?

1Changing a link's href after the page loads
2Stealing the user's mouse cursor position
✓Correct answer: Loading your site in an invisible iframe on top of a decoy page, so the user clicks your buttons without knowing

Explanation

The victim thinks they're clicking "Play" but actually press "Delete account" on your site, which is loaded with their session.

Further reading

Test yourself

Take the Web Security · Junior quiz: questions and options are shuffled, and you get a review of your mistakes at the end.