{"action":"created","issue":{"url":"https://api.github.com/repos/w3c/html/issues/22","labels_url":"https://api.github.com/repos/w3c/html/issues/22/labels{/name}","comments_url":"https://api.github.com/repos/w3c/html/issues/22/comments","events_url":"https://api.github.com/repos/w3c/html/issues/22/events","html_url":"https://github.com/w3c/html/pull/22","id":76205932,"number":22,"title":"add rel=newcontext","user":{"login":"sc0ttbeardsley","id":13938,"avatar_url":"https://avatars.githubusercontent.com/u/13938?v=3","gravatar_id":"","url":"https://api.github.com/users/sc0ttbeardsley","html_url":"https://github.com/sc0ttbeardsley","followers_url":"https://api.github.com/users/sc0ttbeardsley/followers","following_url":"https://api.github.com/users/sc0ttbeardsley/following{/other_user}","gists_url":"https://api.github.com/users/sc0ttbeardsley/gists{/gist_id}","starred_url":"https://api.github.com/users/sc0ttbeardsley/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/sc0ttbeardsley/subscriptions","organizations_url":"https://api.github.com/users/sc0ttbeardsley/orgs","repos_url":"https://api.github.com/users/sc0ttbeardsley/repos","events_url":"https://api.github.com/users/sc0ttbeardsley/events{/privacy}","received_events_url":"https://api.github.com/users/sc0ttbeardsley/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":4,"created_at":"2015-05-14T02:45:43Z","updated_at":"2015-06-16T18:53:26Z","closed_at":null,"pull_request":{"url":"https://api.github.com/repos/w3c/html/pulls/22","html_url":"https://github.com/w3c/html/pull/22","diff_url":"https://github.com/w3c/html/pull/22.diff","patch_url":"https://github.com/w3c/html/pull/22.patch"},"body":"This proposal is an attempt to resolve the window.opener.location.href issue with cross-origin (and same-origin UGC?) navigations when target=\"_blank\". This issue has been discussed previously[1] and a bug[2] in chromium has existed since 2013. Besides using \"rel=noreferrer\" or setting window.opener=null via javascript there appears no clean solution to this problem.\r\n\r\nI propose that a new rel=newcontext attribute be added which can be used to inform user agents that the navigation should be done in a new browsing context and, as a result, window.opener should be set to null. Many publishers wish to allow a referrer to be sent and the Referrer Policy[3] is moving towards a spec where there is more granular control over the document-level and even the link-level value of Referer (sic). Many sites wish to send the origin, for instance, and in these cases they cannot use \"rel=noreferrer\". This leaves them only Javascript to deal with this issue. I think there should be a way to do this via HTML only.\r\n\r\nHere is a quick summary and demo of the issue[4].\r\n\r\n--\r\n[1] https://lists.w3.org/Archives/Public/public-whatwg-archive/2015Jan/0002.html\r\n[2] https://code.google.com/p/chromium/issues/detail?id=168988\r\n[3] http://w3c.github.io/webappsec/specs/referrer-policy/\r\n[4] http://hardstatics.com/thrower.html"},"comment":{"url":"https://api.github.com/repos/w3c/html/issues/comments/112527739","html_url":"https://github.com/w3c/html/pull/22#issuecomment-112527739","issue_url":"https://api.github.com/repos/w3c/html/issues/22","id":112527739,"user":{"login":"sc0ttbeardsley","id":13938,"avatar_url":"https://avatars.githubusercontent.com/u/13938?v=3","gravatar_id":"","url":"https://api.github.com/users/sc0ttbeardsley","html_url":"https://github.com/sc0ttbeardsley","followers_url":"https://api.github.com/users/sc0ttbeardsley/followers","following_url":"https://api.github.com/users/sc0ttbeardsley/following{/other_user}","gists_url":"https://api.github.com/users/sc0ttbeardsley/gists{/gist_id}","starred_url":"https://api.github.com/users/sc0ttbeardsley/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/sc0ttbeardsley/subscriptions","organizations_url":"https://api.github.com/users/sc0ttbeardsley/orgs","repos_url":"https://api.github.com/users/sc0ttbeardsley/repos","events_url":"https://api.github.com/users/sc0ttbeardsley/events{/privacy}","received_events_url":"https://api.github.com/users/sc0ttbeardsley/received_events","type":"User","site_admin":false},"created_at":"2015-06-16T18:53:26Z","updated_at":"2015-06-16T18:53:26Z","body":"@burgerbrains123 sorry, it looks like you are subscribed to this PR. I believe you can remove yourself from \"watching\" this by clicking the \"unsubscribe\" button in github UI."}}