This page was opened by window.open(url) from another tab, without
noopener/noreferrer and without a
Cross-Origin-Opener-Policy header on the opener. That means this page can
reach back into the tab that opened it and navigate it elsewhere — a technique
called reverse tabnabbing.
Checking...