But doing what you describe doesn't rely on this window.opener security issue, right? Of course any site that can open popups can open popups and then also redi

But doing what you describe doesn't rely on this window.opener security issue, right? Of course any site that can open popups can open popups and then also redirect somewhere else. (Also, I'm not sure I've personally seen that)