News for hackers. Stuff that matters.

A comment on Target="_blank" – An underestimated vulnerability (2016).

Re:Target="_blank" – An underestimated vulnerability (2016) by Tehnix on Monday November 13, 2017 @10:22AM (#15687040)
Quick fix is _Search and Replace_ in your whole project, via your favourite editor, from,

> target="_blank"

to

> target="_blank" rel="noopener noreferrer"

Which should not break anything unless you have some weird HTML lying around.

[ Parent | on HN ]
Re:Target="_blank" – An underestimated vulnerability (2016) by JamieF1 on Monday November 13, 2017 @10:47AM (#15687253)
Yep you're right. I wrote a post about it before on Medium and made an extension that automatically puts noreferrer in there for you. Here's the link: https://medium.com/@Jamie_Farrelly/browsers-are-broken-but-n...
[ Parent | on HN ]
Re:Target="_blank" – An underestimated vulnerability (2016) by kccqzy on Monday November 13, 2017 @04:33PM (#15690466)
Does that also work on the <base> element? Browsing through MDN it seems like it doesn’t.
[ Parent | on HN ]