Clickjacking

New 0-Day Browser Exploits Clickjacking - yea, this is bad... Jeremiah Grossman & Robert "RSnake" Hansen

Clickjacking, however, evades the need for this cross domain reading, and instead directly places the mouse over the target area to click on the link or form that contains the nonce - thereby bypassing the need for client side cross domain read exploitation.