May 7, 2021 00:55
3 yrs ago
15 viewers *
English term

clickjacking

GBK English to Chinese Bus/Financial Finance (general)
Definition from Economic Times:
Clickjacking is a phenomenon of hijacking "clicks" in a website context. It is vulnerability in the user interface of the websites. It can occur in any browser on any platform. As the name implies this vulnerability hijacks the clicks of a user on a website which effectively translates into leading a user click on something malicious or sharing confidential information details he is not even aware of.
Example sentences:
To ensure that your site doesn’t get used in a clickjacking attack, you need to make sure it cannot be wrapped in an iframe by a malicious site. This can be done by giving the browser instructions directly via HTTP headers, or in older browser by using client-side JavaScript (frame-killing). (Hacksplaining)
An anonymous polling website that prevents duplicate voting by checking IP addresses, for example, would still be vulnerable to clickjacking because it does not authenticate users using cookies. (Javascript)
This is similar to clickjacking – the criminal act of illegally subscribing customers to a wide range of content for a daily or weekly fee. South Africa is the second most affected African country by this type of mobile crime after Kenya. (Cape Town etc. )
Proposed translations (Chinese)
5 +1 点击劫持
Change log

May 3, 2021 13:53: changed "Kudoz queue" from "In queue" to "Public"

May 7, 2021 00:55: changed "Stage" from "Preparation" to "Submission"

May 11, 2021 01:56: changed "Stage" from "Submission" to "Selection"

May 17, 2021 01:54:

Jun 6, 2021 01:54:

Jul 6, 2021 01:54:

Proposed translations

+1
1 hr

点击劫持

Definition from Web安全实践课程:
点击劫持(click hijacking)也称为 UI 覆盖攻击。它通过一些内容(如游戏)误导被攻击者点击,虽然被攻击者点击的是他所看到的网页,但其实所点击的是另一个置于原网页上面的透明页面。
Example sentences:
1、漏洞理解 点击劫持(Click Jacking)是一种视觉上的欺骗手段,攻击者通过使用一个透明的iframe,覆盖在一个网页上,然后诱使用户在该页面上进行操作,通过调整iframe页面的位置,可以使得伪造的页面恰好和iframe里受害页面里一些功能重合(按钮),以达到窃取用户信息或者劫持用户操作的目的。 Clickjacking是仅此于XSS和CSRF的前端漏洞,因为需要诱使用户交互,攻击成本高,所以不被重视,但危害不容小觑,攻击效果见案例。 (Tencent Cloud Developers)
Peer comment(s):

agree Frank Feng
51 mins
Thank you!
Something went wrong...
Term search
  • All of ProZ.com
  • Term search
  • Jobs
  • Forums
  • Multiple search