Another thing we should do, is add a check for "_blank" in minaccept. This should catch both 'target="_blank"' and "window.open(url, '_blank')" bugs. It won't be perfect (a user could still have the same problem if they do a target with an arbitrary name, and you could assign the window object to another variable), but it should help stop routine addings of target=_blank.
Another thing we should do, is add a check for "_blank" in minaccept. This should catch both 'target="_blank"' and "window.open(url, '_blank')" bugs. It won't be perfect (a user could still have the same problem if they do a target with an arbitrary name, and you could assign the window object to another variable), but it should help stop routine addings of target=_blank.