HackerOne: Reverse Tabnabbing Vulnerability in Outgoing Links

The external links in the reports are not properly handled, using the issue the links can access the openers and replace them with some other page. To Verify the issue, just go to any report which do have any external link and inspect the proceed button. Where the issue lies: rel="noreferrer"...

Coinbase: window.opener is leaking to external domains upon redirect on Safari

Although Coinbase cleared window.opener on external redirects, it was not effective on WebKit-based browsers Safari since Safari's cross-origin security prevents the modification of window.opener of a child window if it lies on a different origin, yet still allows the child window to access...

Instacart: Missing rel=noreferrer tag allows link in list to change url of currently open tab

Hi, When adding links to lists, there is no rel=noreferrer tag present, allowing a linked page to change the url of the currently open tab. This can open the doors for phishing attacks, as users trust the tab that contained instacart. As an example, see my list at https://inst.cr/t/1QmLPG. Clicki...