Visual IVR and frames · Visual

A page embeds the IVRLoadSomeone iframes thevisual script.BrowserHeaderX-Frame-Options canrefuse the frame.Five9ClickWithout the header, theuser can be hijacked.AttackerSetWeb page security is anadministrator option.AdminTestThe PDF says to testbrowsers it does notAdminPhoneThe voice script is adifferent surface.Caller

The script and the frame are both real.

Sources and go deeper