may be because clickjacking is more of a problem after login than
before login....

On Jan 31, 10:27 pm, David Wilson <[email protected]> wrote:
> 2009/1/18 emi420 <[email protected]>:
>
>
>
> > I want to show the Google login form in a lightbox, like this:
>
> >http://microbloog.appspot.com/
>
> > It works, but isn't an elegant solution.
>
> Hi there,
>
> As much as I'm happy to hear this works because I've been wanting to
> use something like it myself, I'm surprised that it works at all. The
> problem is that a lot of security people recommend using
> frames-busting Javascript on login pages, etc., in order to avoid
> Clickjacking attacks.
>
> Does anyone know why this works for the Google login page? They are
> usually very security-concious about these things.
>
> David.
>
>
>
> > Any suggestions?
>
> > Thanks!
>
> --
> It is better to be wrong than to be vague.
>   — Freeman Dyson
--~--~---------~--~----~------------~-------~--~----~
You received this message because you are subscribed to the Google Groups 
"Google App Engine" group.
To post to this group, send email to [email protected]
To unsubscribe from this group, send email to 
[email protected]
For more options, visit this group at 
http://groups.google.com/group/google-appengine?hl=en
-~----------~----~----~----~------~----~------~--~---

Reply via email to