See https://www.jitbit.com/alexblog/256-targetblank---the-most-underestimated-vulnerability-ever/ for details.