Clickjacking

http://cyrilwang.pixnet.net/blog/post/31798436-%5B%E6%8A%80%E8%A1%93%E5%88%86%E4%BA%AB%5D-clickjacking

http://blog.miniasp.com/post/2008/10/11/The-latest-cross-browser-exploit-Clickjacking.aspx

Kidnap your click, to create unexpected behavior:

ex: use invisible iframe to controller your click

user X-FRAME-OPTIONS to prevent it