<story><title>Target=”_blank” is an underestimated vulnerability</title><url>https://medium.com/@jitbit/target-blank-the-most-underestimated-vulnerability-ever-96e328301f4c#.disn238f9</url></story><parent_chain></parent_chain><comment><author>Cpoll</author><text>For anyone that wants to see this in action:&lt;p&gt;- Open a website, let&amp;#x27;s say google.com&lt;p&gt;- Open a console and type in
   `window.open(&amp;quot;&lt;a href=&quot;http:&amp;#x2F;&amp;#x2F;xkcd.com&amp;quot;)`&quot; rel=&quot;nofollow&quot;&gt;http:&amp;#x2F;&amp;#x2F;xkcd.com&amp;quot;)`&lt;/a&gt;&lt;p&gt;- Disable your popup blocker and do it again.&lt;p&gt;- Open a console in the new xkcd window and type in
   `window.opener.location = &amp;quot;&lt;a href=&quot;https:&amp;#x2F;&amp;#x2F;news.ycombinator.com&amp;#x2F;user?id=Cpoll&amp;quot;`&quot; rel=&quot;nofollow&quot;&gt;https:&amp;#x2F;&amp;#x2F;news.ycombinator.com&amp;#x2F;user?id=Cpoll&amp;quot;`&lt;/a&gt;&lt;p&gt;Note that Google quietly turned into my profile page. Now, imagine that it instead turned into maliciousgoogle.com, which looks just like Google, and you can see the attack vector.</text></comment>
<story><title>Target=”_blank” is an underestimated vulnerability</title><url>https://medium.com/@jitbit/target-blank-the-most-underestimated-vulnerability-ever-96e328301f4c#.disn238f9</url></story><parent_chain></parent_chain><comment><author>throwawaybookst</author><text>&lt;i&gt;&amp;gt; PS. Interestingly, Google doesn’t seem to care.&lt;/i&gt;&lt;p&gt;That&amp;#x27;s not fair. They state it&amp;#x27;s a problem that is inherent to browsers, not that they don&amp;#x27;t care about the issue.&lt;p&gt;Also be mindful of Google&amp;#x27;s warning regarding the author&amp;#x27;s workaround:&lt;p&gt;&lt;i&gt;&amp;gt;  in particular, clobbering the window.opener property limits one of the vectors, but still makes it easy to exploit the remaining ones.&lt;/i&gt;</text></comment>