Clickjacking Demo

Go to Google

Using onmousedown="this.href='...'", we show google.com as the target until you click on the link. Then we can see dilbert.com is the target (the href has been changed by mousedown).