Enforce Noopener on Cross-Site Blob URL Navigations
To align Chrome with WebKit behavior, Chromium will enforce noopener
on navigations to Blob URLs where the corresponding site is
cross-site to the top-level site performing the window.open.
This ensures that a null handle is returned when window.open is
performed regardless of if the navigation succeeded.
Design Doc:
https://docs.google.com/document/d/1Xk73RLlLgfVw1p2tYBGqlP7ROQxaMh6kxfusSMm9exM/edit?usp=sharing
Bug: 361751872
Change-Id: I62316cf979629f5be26bbec708c76057f1e2ad80
Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/5887349
Commit-Queue: Janice Liu janiceliu@chromium.org
Reviewed-by: Andrew Williams awillia@chromium.org
Reviewed-by: David Baron dbaron@chromium.org
Auto-Submit: Janice Liu janiceliu@chromium.org
Cr-Commit-Position: refs/heads/main@{#1372255}