Comment 3 for bug 1558361

Revision history for this message
Aaron Wells (u-aaronw) wrote :

Another thing we should do, is add a check for "_blank" in minaccept. This should catch both 'target="_blank"' and "window.open(url, '_blank')" bugs. It won't be perfect (a user could still have the same problem if they do a target with an arbitrary name, and you could assign the window object to another variable), but it should help stop routine addings of target=_blank.