Are you trying hard to fix_blank Target Vulnerability? Yes! Then read out this post. In this, we have created a step by step guide that will help you fix your errors soon without the help of an expert.
Before jumping to the steps, first one should need to understand what blank target is and why you need to fix it. Right?
More or less every web page has links that open in a new tab. For example, most news channels and blog websites share their article headlines on twitter and other social media platforms, which is to link it with the website.
Normally, the links in HTML are opened in the current tab and that’s helpful. As a website owner, you do not want your audience reach to the other destination and feel trouble to get so many tabs open.
You know that users do not give you so much time to perform and you want your audience to stay on your page. After all, this will create revenue for your site. In case they reach to third party’s page, you will lose your audience.
Well, there is no doubt to say sometimes external links are important, but at the same time, you want your audience on your page. To solve this issue, Target_blank attribute is used. With this, you will get a new link that opens in a new tab.
And, don’t worry you do not need to write HTM code or JavaScript. For example:
Steps to Fix_blank Target Vulnerability
This link helps your user to reach on the link with a new tab in HTML. When you are doing this on your page, you know the page is safe and linked with a trusted source.
But what if it linked with untrusted links? The external link you are using may be interrelated with a third party or comments you are getting may be linked with the third party. In such cases, you are unable to do anything.
What’s The Security Issue? Tabnabbing!
With a blank target link, the page will get limited access to the linking page. As per the security concerns, you can change your landing location of the linking page with window.opener.location. Let us consider this with an example:
A news agency uses twitter to share some stories. Users reach and if he wants to read the full story, click on the link and reached the new tab. To do this, news agencies use window.opener.loaction=http://fake-twitter.com
With this, now the user is no longer on Twitter, he reached to the new tab, which is a fake landing page created by the news agency. At this time, twitter asks for login details, if the user is curious to read that content, he will sign up. This kind of way called Tabnabbing.
Blank Target Vulnerability
This term came across from the Mathias and Ben Halpern. Ultimately, the blank target page works to target the audience on the right page. But it also opens the doors for hackers, which is known as blank target vulnerability.
If you want to save your page from these hacks, we have created few ways to protect and Fix _blank Target Vulnerability.
Might you are thinking now, how your page can get attacked? If an attacker has full control over your Facebook page and knows every detail of your page. For example:
<a href=https://www.facebook.com/target_blank”> </a>
It appears on a random website like:
<a href=https://ift.tt/3jKHqM5> </a>
The Risk Factor
If anyone hacks your page, you know what trouble you will face. The hacker might spread bad news or fool your clients via adding offers, plans, etc. this usually happens to high-profile sites rather low profile sites.
Security
Now, in this section, we will talk about some ways to Fix _blank Target Vulnerability. The problem is only to protect your site from hackers, so here are the recommended tips.
· Trusted Method
If you do need target-blank badly then avoid it, but if you need then perform 100% vulnerability, it is simple and easy to implement. If you have external links then you must use rel=” external” instead Target_blank.
Using rel=” external” work best and give 100% protection. And if you want to open the external link in a new tab then use:
$(‘a [rel=”external”]).attr (target’,’_blank’);
· Another Method
You can use rel=”noopener” instead of rel=” external”. This is just like WordPress while inserting blank_target links. The noopener helps the website to stay protective of the latest browsers. Unfortunately, Google Chrome, Firefox, and older version do not support noopener. If you have the latest browser, it will help you.
For the older version, rel=” external” is recommended. But if you have new you can use the following in JQuery.
<a href=https://sktthemes.org/’target=_blank” rel=”noopener noreferrer”> skt</a>
This key may fail in an older version of safari. To use this, you will need to add
Wrap Up
The use of blank_target is beneficial when you want to boost site revenue. But it is recommended to use this carefully as no one hacker attacks your site.
The post How To Fix_blank Target Vulnerability appeared first on SKT Themes.
0 Commentaires