How/where do I add this js code to index.html to fix this vulnerability?

[JonDevOps]

Here is the code:
var newWnd = window.open();
newWnd.opener = null;

Every time you open a new window via window.open(); you're also "vulnerable" to this, so this code will always reset the "opener" property

I am addig this to fix a security vulnerability cause by target="_blank"
For more info see: https://www.jitbit.com/alexblog/256-targetblank---the-most-underestimated-vulnerability-ever/

For more info about this vuln see: https://developers.google.com/web/tools/lighthouse/audits/noopener

[hannahpi]

We're not using window.open but if we do use it in JavaScript then we need to add the second line. I don't think we have to add an event listener for window open but that could also fix it if i understand correctly. I'm still not clear on the impact of these attacks because it relies on either the site you're linking to or from. Also i thought Google Chrome put each tab in its own process (i must've been wrong about that or there's a special privilege granted to new tabs started from a link, maybe in how the process forks a new one?)