-
-
Notifications
You must be signed in to change notification settings - Fork 209
Closed
Labels
bugSomething isn't workingSomething isn't working
Description
What happened?
External links using target="_blank" without the rel attribute create a security vulnerability that allows opened pages to manipulate the parent window through window.opener. This can lead to reverse tab-nabbing attacks where malicious sites redirect users to phishing pages.
// Before
// After
Replication Steps
- Navigate to apps/marketing/src/app/layout.tsx
- Go to line 112
- Observe the Link component with target="_blank" but missing rel attribute
Self hosted or Cloud?
Self hosted
What browsers are you seeing the problem on?
No response
Metadata
Metadata
Assignees
Labels
bugSomething isn't workingSomething isn't working