Subvert templates
JavaScript is required to run these attacks.
A small set of example attacks, in rough order of how good they are.
Blog double-clickjacking demo
Basic double-clickjacking demo
Google Form library demo
Google Form library demo (element-based)