thinQmaster Virtual testing partner Adaptive practice exams that find your weak spots and drill them. Every answer explained. From $69
Enroll

thinQmaster

Find your exam

Five questions free, before you decide.

Step 1 · choose a vendor

In one of our camps? Your practice exams come with the tuition — they are on your study page already.

Application & OT Security · Advanced

Reverse Tabnabbing

An attack in which a page opened via a link with target=_blank uses window.opener to redirect the original tab to a phishing page.

Definition

When a link opens a new tab without rel=noopener, the new page can change the opener's location. Modern browsers imply noopener for target=_blank, but adding rel="noopener noreferrer" remains good practice.

Example

A user-supplied link in a forum opens a page that silently replaces the forum tab with a fake login screen.

Exam tip

Fix: rel=noopener on external links.

Related terms