Window.opener clarification of cross-origin behavior

[ottworks]

MDN URL

https://developer.mozilla.org/en-US/docs/Web/API/Window/opener

What specific section or headline is this issue about?

Value

What information was incorrect, unhelpful, or incomplete?

If the opener is not on the same origin as the current page, functionality of the opener object is limited. For example, variables and functions on the window object are not accessible. However, navigation of the opener window is possible, which means that the opened page can open a URL in the original tab or window. In some cases, this makes phishing attacks possible, where a trusted page that is opened in the original window is replaced by a phishing page by the newly opened page.

What did you expect to see?

A table of available fields for cross-origin use.

Do you have any supporting links, references, or citations?

No response

Do you have anything more you want to share?

No response

MDN metadata

Page report details

• Folder: en-us/web/api/window/opener
• MDN URL: https://developer.mozilla.org/en-US/docs/Web/API/Window/opener
• GitHub URL: https://github.com/mdn/content/blob/main/files/en-us/web/api/window/opener/index.md
• Last commit: f7dae62
• Document last modified: 2022-09-09T05:19:45.000Z