http://feedproxy.google.com/~r/Securityweek/~3/JSD2zIXnbt4/new-attack-combines-self-xss-and-clickjacking