TRaSH-Guides

Commit Graph

Author	SHA1	Message	Date
TRaSH	1dedc17c9a	Security Fixes: prevent a type of phishing known as tabnabbing. - Added: noopener noreferrer to external URL redirects (others pages will follow soon) - Info: Tabnabbing, sometimes called reverse tabnabbing, is an exploit that uses the browser's default behavior with target="_blank" to gain partial access to your page through the window.object API. With tabnabbing, a page that you link to could cause your page to redirect to a fake login page. This would be hard for most users to notice because the focus would be on the tab that just opened – not the original tab with your page.	4 years ago
TRaSH	01bc72769f	Updated to make it more compatible with mkdocs Updated to make it more compatible with mkdocs	4 years ago

Author

SHA1

Message

Date

TRaSH

1dedc17c9a

Security Fixes: prevent a type of phishing known as tabnabbing.

- Added: noopener noreferrer to external URL redirects (others pages will follow soon)
  - Info: Tabnabbing, sometimes called reverse tabnabbing, is an exploit that uses the browser's default behavior with target="_blank" to gain partial access to your page through the window.object API.

With tabnabbing, a page that you link to could cause your page to redirect to a fake login page. This would be hard for most users to notice because the focus would be on the tab that just opened – not the original tab with your page.

TRaSH

01bc72769f

Updated to make it more compatible with mkdocs

Updated to make it more compatible with mkdocs

2 Commits (a331cebb7b2fffe7d5abadd8860f05645f821a43)