Noopener-Burp-Extension

Find Target="_blank" values within web pages that are set without 'noopener' and 'noreferrer' attributes

The target attribute specifies the context in where a linked resource will open when the it is clicked by a user. Links opened via target blank attributes have the ability to make changes to the original page. This could be leveraged to conduct phishing attacks. More technical details can be found in the links below.

• https://mathiasbynens.github.io/rel-noopener/
• https://dev.to/ben/the-targetblank-vulnerability-by-example
• https://snoopysecurity.github.io/webappsec/2018/04/26/target_blank_vulnerability.html