This repository was archived by the owner on Jul 15, 2023. It is now read-only.
This repository was archived by the owner on Jul 15, 2023. It is now read-only.
new security rule: window.open opener is not null #293
Closed
Description
https://www.jitbit.com/alexblog/256-targetblank---the-most-underestimated-vulnerability-ever/
If you use window.open then you must do this:
let newWnd = window.open();
newWnd.opener = null;