Robuta

https://lists.w3.org/Archives/Public/public-html-bugzilla/2011Oct/0430.html [Bug 13894] window.open() doesn't check for trusted events the way HTMLAnchorElement.click() does.... https://nvd.nist.gov/vuln/detail/CVE-2020-13894 NVD - CVE-2020-13894 nvdcve