Re: XSS mitigation in browsers

On 1/20/11 6:06 PM, Michal Zalewski wrote:
> I proposed this several years ago, before all the public attention
> clickjacking managed to get:
> 
> ...but the response to any solutions that require any UI logic was
> overwhelmingly negative.

I know, but that was two years ago and we still haven't solved the
problem; time to try again? I'm pretty negative about filling out my
tax forms every year but that doesn't mean I get to skip doing it.

Received on Friday, 21 January 2011 02:30:55 UTC