I built a quick userscript that treats rel=&quot;noopener&quot; as default for links with target:&quot;_blank&quot;.<p>It could be worth checking out if you want to avoid experiencing this security issue yourself (but I offer no warranties) or if you want to see if it would break any site you visit if browsers would enable the behavior by default.<p><a href="https:&#x2F;&#x2F;github.com&#x2F;jaredsohn&#x2F;noopener_by_default" rel="nofollow">https:&#x2F;&#x2F;github.com&#x2F;jaredsohn&#x2F;noopener_by_default</a>