Clickjacking protection
OwnerRobert Hanseninventor
Life of this patent
Estimating the term…
Abstract
A clickjacking protector in an electronic system helps prevent unwanted clickjacking. The elements clicked on by the click position are evaluated to determine whether any of the elements clicked on by the click position is obscured (including being transparent or partially transparent). A protective action is generated in response to a determination that an element clicked on by the click position is obscured.
Claims30
A method of protecting against clickjacking in an electronic system, comprising:
- determining whether a click position clicks on an obscured element rendered from a networked communication that includes a command that enables clickjack protection that allows cross-domain accesses;
- and
- taking a protective action, in a device of the electronic system, in response to the determination that the click position clicks on the obscured element when the clickjack protection is enabled.
A non-transitory tangible medium including instructions that, when executed on a processor of an electronic system, protect against clickjacking in an electronic system, comprising:
- determining whether any element clicked on by the click position is obscured;
- determining whether a command received from a networked communication enables clickjack protection;
- and
- taking a protective action in response to the determination that the click position clicks on the obscured element when the clickjack protection is enabled.
A web browsing system, comprising:
- a network-enabled consumer machine that is arranged to receive a communication that includes a command that enables clickjack protection from a networked service provider that describes the structure and functionality of content of the communication that is received by the content user;
- a layer manager that is arranged to determine whether any element of the received communication that is clicked on by a click position is obscured;
- and
- a clickjack protector that, when enabled, is arranged to generate a protective response to a determination that an element clicked on by the click position is obscured.
Dependencies are inferred from the claim text.