Target="_blank" – An underestimated vulnerability (2016)
Report a link problem
Submission timeline
2007–2026One slot for every year since HN launched. Height is that year's peak points; orange marks a 100+ point or 50+ comment breakout. Select a bar to open its strongest thread.
First comments on top threads
HN comment orderI think/hope Chromium's recent announcement about "Expanding user protections on the web", addresses the redirect issue: > When the user interacts with content, things can also go wrong. One example that causes user frustration is when clicking a link opens the desired destination in a new tab, while the main window navigates to a different, unwanted page. Starting in Chrome 65 we'll also detect this behavior, trigger an infobar, and prevent the main tab from being redirected. This allows the…
It's called Reverse Tabnabbing on OWASP: https://www.owasp.org/index.php/Reverse_Tabnabbing - lots more details there. Its detected by the ZAP beta passive scan rules: https://github.com/zaproxy/zap-extensions/wiki/HelpAddonsPsc...
"underestimated vulnerability" that also has been fixed since 2021. I remember reading about this back in ~2016 if not earlier. Was also featured on HN at least twice (via https://mathiasbynens.github.io/rel-noopener/ where I think I read about it first): - https://news.ycombinator.com/item?id=11553740 - https://news.ycombinator.com/item?id=16226800
The first top-level comment from each of the four biggest threads, in HN’s own order. Excerpts are shortened; open a comment for full context.
- Breakout years
- 2
- Total points
- 399
- Total comments
- 75
100+ points or 50+ comments
reference only — not used in Hall rules or ranking
reference only — not used in Hall rules or ranking
Every submission
| Date | Title as submitted | By | Points | Comments |
|---|---|---|---|---|
| 2016-07-20 | The most underestimated vulnerability – target=blank | webdisrupt | 2 | 0 |
| 2017-11-13 | Target="_blank" – An underestimated vulnerability (2016)First breakout · Best thread | handpickednames | 264 | 58 |
| 2019-12-23 | Target=“_blank” – the most underestimated vulnerability ever | antibland | 105 | 13 |
| 2022-05-18 | Target=“_blank” – the most underestimated vulnerability ever (2021)Latest 20+ point return | thrusong | 28 | 4 |