10108Reverse Tabnabbing

PUBLISHEDsecurity alertMedium
Passive

Metadata

Alert ID:
10108
Risk:
Medium
Type:
Passive

摘要

At least one link on this page is vulnerable to Reverse tabnabbing as it uses a target attribute without using both of the “noopener” and “noreferrer” keywords in the “rel” attribute, which allows the target page to take control of this page.

解决方案

Do not use a target attribute, or if you have to then also add the attribute: rel="noopener noreferrer".

参考