WHERA Benefits
New reward
Your lunch voucher is ready
Confirm your account to unlock your employee reward.
25 EUR
Expires today
Single use
Single use
Voucher claim clicked. This interaction happened in the attacker overlay, not inside the framed WHERA page.
Demo point: the real site is frameable, so another page can visually wrap it with convincing fake UI.
Prevent it by sending
Prevent it by sending
Content-Security-Policy: frame-ancestors 'none' or allow only trusted parents with frame-ancestors 'self' https://trusted.example.