News for hackers. Stuff that matters.
Re:About rel=noopener by illuna on Friday April 22, 2016 @11:17PM (#11553984)
Linking to stuff that you control is okay, because you know and control the contents inside the new window. So your example (terms and conditions created by you) is totally cool.

As described in the article, it is dangerous when the link's destination is not controlled by you. That destination has access to its opener's window and could potentially change the url to eg. a malicious look-alike of your site.

It's a consideration when linking to arbitrary pages, but when you own the destination (and trust that your site has no other security issues) then this becomes a non-issue.

Re:About rel=noopener by pmalynin on Friday April 22, 2016 @11:20PM (#11553998)
This is one of the reasons why FB et al go to a special link before opening the actual target site.
Re:About rel=noopener by hueving on Saturday April 23, 2016 @12:18AM (#11554131)
That's more of a happy accident. Their primary reason is to track things.
Re:About rel=noopener by tuukkah on Saturday April 23, 2016 @01:36AM (#11554297)
I thought the primary reason was privacy: https://m.facebook.com/notes/facebook-engineering/protecting...
Re:About rel=noopener by xuki on Saturday April 23, 2016 @12:54AM (#11554220)
You can track click without a redirect.
Re:About rel=noopener by azazqadir on Saturday April 23, 2016 @03:46AM (#11554606)
Like using utm?
Re:About rel=noopener by xuki on Saturday April 23, 2016 @12:35PM (#11556212)
Like using javascript