alt Hacker NewsHonestly, I feel like browsers should handle this.
Sites are always going to do malicious shit. The browser should know that when I hit the back button I want to go to the place I clicked that brought me here. SPAs have severely perverted this simple idea, but I’m sure browser devs can figure it out.
It was really just a bad design decision that was exploited. It should be deprecated and removed. Allow it on intranets or some legacy website specific setting, but it should be blocked on the public internet.