SECURITY: Fix tab nabbing.

SECURITY: Fix tab nabbing.

diff --git a/app/assets/javascripts/discourse/lib/click-track.js.es6 b/app/assets/javascripts/discourse/lib/click-track.js.es6
index 52b1b78..d4d0e71 100644
--- a/app/assets/javascripts/discourse/lib/click-track.js.es6
+++ b/app/assets/javascripts/discourse/lib/click-track.js.es6
@@ -108,7 +108,9 @@ export default {
 
     if (!wantsNewWindow(e)) {
       if (!isInternal && openExternalInNewTab) {
-        window.open(href, "_blank").focus();
+        const newWindow = window.open(href, "_blank");
+        newWindow.opener = null;
+        newWindow.focus();
 
         // Hack to prevent changing current window.location.
         // e.preventDefault() does not work.

GitHub sha: 3aa143a5