As we all use target="_blank" to open the link into new tab of a window but everyone should know a... Tagged with security, html, javascript, webdev.

Dev.to is a community platform for developers, offering resources, discussions, and networking opportunities to empower individuals in their coding journey. Developers can learn new programming languages, frameworks, and tools, engage in discussions on best practices, and share their experiences with fellow developers to enhance their skills and grow their professional network.

When we open a new tab link window.opener get triggered which made a limited access to the specific tab opened. As we all use target="_blank" to open the link into new tab of a window but everyone should know a risk inside it. Do not forget to add relation attribute in your link tag rel=noopener noreferrer.

target="_blank" is a security risk?

<p>Note that it takes reading into the comments of this article to get the scoop that it’s not an issue anymore. All modern browsers patched this</p>


<p>TL;DR Not a security risk any more, but there used to be <code>window.opener</code> = the window element of the page you clicked from</p>
