Just noticed here<http://code.google.com/appengine/docs/revision_history.html> :
*2008-05-01* Program policies <http://code.google.com/appengine/program_policies.html>updated to clarify policy on complying with terms of service policies of other Google services, e.g. framing the Google Accounts sign-in screen I can't seem to find the relevant TOS document, but I guess it's sufficiently implied from the changelog that they don't want people doing this. David. 2009/2/1 gops <patelgo...@gmail.com>: > > may be because clickjacking is more of a problem after login than > before login.... > > On Jan 31, 10:27 pm, David Wilson <d...@botanicus.net> wrote: >> 2009/1/18 emi420 <emi...@proyecto83.com>: >> >> >> >> > I want to show the Google login form in a lightbox, like this: >> >> >http://microbloog.appspot.com/ >> >> > It works, but isn't an elegant solution. >> >> Hi there, >> >> As much as I'm happy to hear this works because I've been wanting to >> use something like it myself, I'm surprised that it works at all. The >> problem is that a lot of security people recommend using >> frames-busting Javascript on login pages, etc., in order to avoid >> Clickjacking attacks. >> >> Does anyone know why this works for the Google login page? They are >> usually very security-concious about these things. >> >> David. >> >> >> >> > Any suggestions? >> >> > Thanks! >> >> -- >> It is better to be wrong than to be vague. >> — Freeman Dyson > > > -- It is better to be wrong than to be vague. — Freeman Dyson --~--~---------~--~----~------------~-------~--~----~ You received this message because you are subscribed to the Google Groups "Google App Engine" group. To post to this group, send email to google-appengine@googlegroups.com To unsubscribe from this group, send email to google-appengine+unsubscr...@googlegroups.com For more options, visit this group at http://groups.google.com/group/google-appengine?hl=en -~----------~----~----~----~------~----~------~--~---
