Testing popup behavior and security and privacy issues

[mikamikem]

Test pages to validate noopener and noreferrer are being respected. Prompted by https://app.asana.com/0/1199892415909552/1207023955301654/f

These need to be hosted to satisfy CORS requirements, file:// URI's are treated as separate domains even if they share the same base path, so browsers will throw permission errors if window.opener is requested from the popup.

• noopener window.open() check
• target="_blank" check
• noreferrer window.open() check
• rel="noopener" check
• rel="noreferrer" check

[kdzwinel]

Hey Nora! Thanks for crating those pages 🙏 I left you some small comments re the format of pages / categorization - hopefully no more than 10min of work.