Basically, I am having an
<a> tag with target set to
_blank, where an attacker has control over the
However, this XSS executes in a new
about:blank tab because of the target setting.