In part -4 we are covering the following attacks. Clickjacking is an attack where the attacker tricks the user into clicking one link that routes to another page. An attacker may also choose to redirect the clicks to download malware or gain access to vital systems. The application should allow redirection only to white list of URLs. It is recommended not to serve internal pages without proper authentication and authorization checks. It is also recommended to configure strong session management. An attacker can impersonate other users.”]
Source: https://gbhackers.com/web-application-attacks-part4/