Cross-Origin-Opener-Policy: preventing attacks from popups: Understanding cross-origin security headers - Part 1

In this post I describe the vulnerabilities in window.opener and window.open() and how to protect yourself with Cross-Origin-Opener-Policy

https://andrewlock.net/understanding-security-headers-part-1-cross-origin-opener-policy-preventing-attacks-from-popups/