technology


The target=_blank security issue

There’s a little-known security risk built into the design of HTML. It concerns links that open in a new tab or window. You make it happen by specifying target="blank" in an anchor (a) element. For example:

<a href="something.example.com" target="_blank">

The trouble is that when you do it, you put the page containing that link at risk. For some bizarre reason, the designers of HTML decided that the destination page should gain access to the window.opener property of the source page. This gives the target page — the one run by someone else considerable control over your page. For instance, it can redirect your page to another URL.
(more…)


HTML for blog writers

If you write for websites, you need to know the basics of HTML. Even if you do your writing in Microsoft Word, Open Office, or a Web editor, it will get turned into HTML (or, less often, PDF). You need to understand how it will work in its final form.

HTML is a markup language. It’s text which contains plain human language plus tags that tell the browser how to render it. The tags are more guidelines than rules. They indicate an intent rather than dictating an exact appearance. In different browsers, or even different settings in the same browser, you might see differences in fonts, spacing, colors, and so on.
(more…)