Google has a pretty good description: https://sites.google.com/site/bughunteruniversity/nonvuln/phishing-with-window-opener https://sites.google.com/site/bughun

Google has a pretty good description: https://sites.google.com/site/bughunteruniversity/nonvuln/phishing-with-window-opener https://sites.google.com/site/bughunteruniversity/nonvuln/ph... I think the biggest problem with this attack is that many don't believe it to be possible. And why should they, given the inconsistent browser behavior.