Clickjacking on https://download.nextcloud.com/

How it was found

the vulnerability is Clickjacking

Steps for Reproduce:

1. Create a script like this

2. Enter a file name after saving it in the .html format Then the web is Vuln Clickjacking

Sorry bad english (im indonesian)

Impact

By using Clickjacking technique, an attacker hijack's click's meant for one page and route them to another page, most likely for another application, domain, or both.