4 ms·

This is a pretty old bug, I think I reported it a few years ago to Google. EDIT: 2013 to be exact.

• jaredsohn 11y ago
  FYI, the article links to a Chromium issue from 2013: https://bugs.chromium.org/p/chromium/issues/detail?id=168988 https://bugs.chromium.org/p/chromium/issues/detail?id=168988 which links to another issue from 2012. Edit: My purpose was to confirm the bug has been "known" for awhile, not to take away credit for you reporting the bug years ago. Congrats for independently discovering it before many people (such as myself) became aware of it.
  • pmalynin 11y ago
    Well there you go, although I submitted it trough a different channel. For sure, I think its a very important bug that hasn't had much attention for years now, especially since so many websites use _blank, GMail being one of them.
    • ptoomey3 11y ago
      I get that linking from a "trusted site" to a "not trusted site" is probably of greater concern. But, this `noopener` does nothing to address a similar attack demonstrated here: http://lcamtuf.coredump.cx/switch/ http://lcamtuf.coredump.cx/switch/.