Comment

Comment by throwawaybookst

> PS. Interestingly, Google doesn’t seem to care.

That's not fair. They state it's a problem that is inherent to browsers, not that they don't care about the issue.

Also be mindful of Google's warning regarding the author's workaround:

> in particular, clobbering the window.opener property limits one of the vectors, but still makes it easy to exploit the remaining ones.

Discussion

Live from the official Hacker News API

A modern reader for Hacker News · SvelteKit + Skeleton