Avoid target='_blank' attribute without rel='noopener noreferrer'
Description A malicious actor can gain full control over the user's DOM window object. This can lead to phishing attacks such as fake login prompts or password alerts being shown to the user. Using target='_blank' links grants the page we are linking...
Aug 20, 20241 min read17



