1. “We’re safe from click jacking attacks because we don’t use frames.” What, if anything, is wrong with this statement? 2. How would you test whether an application allows cross-domain requests using...

1. “We’re safe from click jacking attacks because we don’t use frames.” What, if anything, is wrong with this statement?

2. How would you test whether an application allows cross-domain requests using XMLHttpRequest?

3. Describe three ways in which an attacker might induce a victim to use an arbitrary cookie.