You can have a scenario in which there is a button aimed at performing function A, but a hacker will place a replica button with a lower z-index that gets triggered to perform function B when a user has clicked the normal button that they are able to see.
Clickjacking example
by Michel Bruchet, Jason De Oliveira, Kenneth Yamikani Fukizi
Learn ASP.NET Core 3 - Second Edition
- Title Page
- Copyright and Credits
- Dedication
- About Packt
- Contributors
- Preface
- Section 1: Introduction and Environment Setup
- What Is ASP.NET Core 3?
- Setting Up the Environment
- Continuous Integration Pipeline in Azure DevOps
- Section 2: A Practical Demonstration of ASP.NET Core 3
- Basic Concepts of ASP.NET Core 3 via a Custom Application: Part 1
- Preview of the Tic-Tac-Toe demo application
- Building the Tic-Tac-Toe game
- Introduction to the default ASP.NET Core 3 classes
- Preparing the basic project structure
- Creating the Tic-Tac-Toe home page
- Giving your web pages a more modern look by using NPM and layout pages
- Creating the Tic-Tac-Toe user registration page
- Creating the Tic-Tac-Toe user service
- Creating a basic communication middleware for the Tic-Tac-Toe application
- Adding error handling to the Tic-Tac-Toe application
- Summary
- Basic Concepts of ASP.NET Core 3 via a Custom Application: Part 2
- Client-side development using JavaScript
- Optimizing your web applications and using bundling and minification
- Working with WebSockets for real-time communication scenarios
- Taking advantage of session and user cache management
- Applying globalization and localization for multi-lingual user interfaces
- Configuring your applications and services
- Implementing advanced dependency injection concepts
- Summary
- Introducing Razor Components and SignalR
- Creating ASP.NET Core MVC Applications
- Understanding the Model View Controller pattern
- Creating dedicated layouts for multiple devices
- Understanding ASP.NET Core state management
- Using view pages, partial views, View Components, and Tag Helpers
- Dividing a web application into multiple areas
- Applying advanced concepts such as view engines, unit tests, and integration tests
- Layering ASP.NET Core 3 applications
- Summary
- Creating Web API Applications
- Section 3: The ASP.NET Core 3 Supporting Ecosystem
- Accessing Data Using Entity Framework Core 3
- Securing ASP.NET Core 3 Applications
- Securing ASP.NET Applications - Vulnerabilities
- Hosting ASP.NET Core 3 Applications
- Managing ASP.NET Core 3 Applications
- Other Books You May Enjoy
Clickjacking example
-
No Comment
..................Content has been hidden....................
You can't read the all page of ebook, please click here login for view all page.