[bobross]

Clickjacking works without JavaScript assuming the targeted site works without JavaScript. HTML and CSS suffice.

[samirm]

I want to believe you, but the only example I found doesn't work.