Post

window.opener and target=”_blank”: The Tabnabbing Risk Explained What window.opener is, how reverse tabnabbing attacks used target="_blank" links, why rel="noopener" fixes it, what browsers do by default today, and how popups like OAuth logins should communicate instead.