4 ms·
It seems like there's an easy fix... infer 'rel=noopener' by default on every https site that opens an http site. Or just don't allow http pages to redirect htt
by wmil 10y ago
It seems like there's an easy fix... infer 'rel=noopener' by default on every https site that opens an http site. Or just don't allow http pages to redirect https pages.
It would make scam pages much more expensive while still allowing most legitimate use. And it would be consistent with existing security policies.