Hacker News new | ask | show | jobs
by fivesigma 3143 days ago
A legitimate usage case would be opening a login popup on another domain that can't be iframe'd. For example OAuth social network login popups. They require window.opener to send back login credentials to the original website.