An April Fool’s prank Google pulled two weeks ago inadvertently broke some of the site’s security, an error that briefly allowed so-called click-jacking exploits that trick users into performing undesired actions such as changing their user preferences.