title: Copying from iframe block
body: <p>I have a clickjacking vulnerable endpoint <code>https://www.example.com/myaccount</code>.
  At this endpoint there is a block which display the user's API key , which have both public and private keys.</p>
  <p>I was able to load the respective endpoint in iframe when the user is logged in.</p>
  <p>I did the iframe using the below code</p>
  <pre class="lang-html prettyprint-override"><code>&lt;div qjid=&quot;quickjack&quot; style=&quot;overflow: hidden; width: 775px; height: 227px; position: relative;&quot; id=&quot;cksl6&quot;&gt;
  
  &lt;iframe name=&quot;cksl7&quot; src=&quot;https://vulnerableendpoint.example.com/my-account&quot; style=&quot;border: 0pt none ; left: -267px; top: -1377px; position: absolute; width: 2880px; height: 1642px;&quot; scrolling=&quot;no&quot;&gt;&lt;/iframe&gt;&lt;/div&gt;
  </code></pre>
  <p>The above code successfully loaded the respective vulnerable endpoint</p>
  <p>Requirement</p>
  <p>I need to create an overlay with junk content and when the junk content is copied , the API keys which is under the overlay should be copied.</p>
  <blockquote>
  <p>One thing to notice , the private key is hidden , it needs to be shown in plaint text by clicking the <code>Show</code> button similar to show password</p>
  </blockquote>
  <p>How can I achieve it using javascript ?</p>