#HTML #cheatsheet

html_cheatsheet.html

<!-- The page we're linking to gains partial access to the linking page via the window.opener object. -->
target='_blank'

<!-- to prevent access, add -->
rel="noopener"
<!-- FF does not support "noopener" so add this -->
rel="noopener noreferrer"

<!-- window.open(); you're also "vulnerable" to this, so always reset the "opener" property -->
<script>
  var newWnd = window.open();
  newWnd.opener = null;
</script>