Chrome is finally getting a much-needed anti-hijacking feature
Google is bringing tab hijack blocking to the browser
Google is bringing Chrome in line with the likes of Safari and Firefox by introducing a security feature that will help to protect users against tab hijacking.
A technique known as tab-nabbing is used in various attacks, including phishing campaigns that redirect victims to malicious sites. With Chrome 88 Google is taking steps to offer protection against a particular variant of this threat.
- Find out how to enable Chrome dark mode
- You can also try Facebook dark mode
- Finish the set with WhatsApp dark mode
Tab-nabbing can be avoided if websites are coded in a particular way. The exploit takes advantage of the fact that when a links is opened in a new tab using the attribute target=_blank, the new tabs retains access to the original page.
More than this, the window.opener JavaScript function can be used to redirect push people to malicious site by modifying the original page. If a website uses the rel="noopener" attribute, this exploit is stopped in its tracks, but not all sites do this – especially older ones that are no longer being maintained.
Tab lockdown
Google is finally going to start automatically using rel="noopener" for any newly opened tab, just as already happens in Firefox and Safari. It's not clear quite why it has taken Google so long to catch up with other browser; Mozilla and Apple introduced measures to counter tab-nabbing way back in 2018.
The security update is due for inclusion in Chrome 88 which is set for release in January 2021. The same feature will also be making its way to other Chromium-based web browsers such as Edge and Opera, but exact release dates are not yet known.
- Check out our guide to the best browsers
Via ZDNet
Get daily insight, inspiration and deals in your inbox
Sign up for breaking news, reviews, opinion, top tech deals, and more.
Sofia is a tech journalist who's been writing about software, hardware and the web for nearly 25 years – but still looks as youthful as ever! After years writing for magazines, her life moved online and remains fueled by technology, music and nature.
Having written for websites and magazines since 2000, producing a wide range of reviews, guides, tutorials, brochures, newsletters and more, she continues to write for diverse audiences, from computing newbies to advanced users and business clients. Always willing to try something new, she loves sharing new discoveries with others.
Sofia lives and breathes Windows, Android, iOS, macOS and just about anything with a power button, but her particular areas of interest include security, tweaking and privacy. Her other loves include walking, music, her two Malamutes and, of course, her wife and daughter.