search for: 1a4fb7cf

https://github.com/whatwg/html/issues/2119 Major flaw in how the specification for window.opener() works resulting in a major phishing vulnerability that is cake to pull off. The right solution isn't considered because it would break compatibility with the few number sites that depend upon the broken specification even though it would be simple for those sites to implement a secure