The target _blank vulnerability

Are you using target='_blank' in your links? If you are, you should be using rel='noopener noreferrer' with it.