Busting Frame Busting a Study of Clickjacking Vulnerabilities on Popular Sites
We study frame busting defense for the Alexa Top-500 sites and show that all can be broken. Some attacks are browser-specific, other exploit code mistakes. We conclude with practical recommendations how to implement a secure frame busting defense.
@W2SP, May 2010