File:Masked iframe.png

Clickjacking - Masked iframe - Testing guide (OWASP-CS-004)