Feross Aboukhadijeh • 10/8/2012

Using the HTML5 Fullscreen API for Phishing Attacks

This technical article details a security vulnerability where the HTML5 Fullscreen API is exploited for phishing. It demonstrates how a malicious link can trigger fullscreen mode and display a fake website with spoofed browser UI, tricking users into believing they are on a legitimate, secure site like a bank. The post includes code examples and discusses the API's restrictions and real-world implications for web security.

0 comments

#web security #Browser API #Html5 Fullscreen API