This video demonstrates a bypass of Google Password Alert that uses the HTML sandbox attribute. Loading the Phishing page in an iframe with the sandbox attribute set prevents key press events from being generated. Password Alerts uses key press events to detect that a user entered his/her password. Preventing key press events from being generated bypasses Password Alert.
