Chrome JS popups to work on a per-tab basis
This change means that popups won’t block users from switching and closing the tab, putting an end to any overly-aggresive tactics on the part of the website’s owner(s).
A similar change was made to Safari 9.1, released this week. Apple’s decision came after crooks used a bug in Safari to block users on malicious pages using popups. Crooks then tried to extort payment, posing as ransomware.
Google has debated the change since July 2016
In the meantime, Google is asking web developers to ponder using new technologies as alternatives to the classic alert(), confirm(), and dialog() functions. The list includes:
- Notifications API – for notifying the user of events (e.g. calendaring sites)
- HTML < dialog > element – for obtaining user input
- Devtool’s console.log(document.origin) – for XSS proofs-of-concept
Working as a cyber security solutions architect, Alisa focuses on bug bounty and network security. Before joining us she held a cyber security researcher positions within a variety of cyber security start-ups. She also experience in different industry domains like finance, healthcare and consumer products.