Added window.open protection

lib/iframeProtection.js

@@ -262,6 +262,32 @@
 		);
 	}
 	
+	function protectWindowOpen({window, wrappedWindow, changeProperty, singleCallback}){
+		const windowOpenDescriptor = Object.getOwnPropertyDescriptor(
+			wrappedWindow,
+			"open"
+		);
+		const windowOpen = windowOpenDescriptor.value;
+		const getDocument = Object.getOwnPropertyDescriptor(
+			window,
+			"document"
+		).get;
+		changeProperty(
+			wrappedWindow,
+			"open", "value", exportFunction(function open(){
+				const newWindow = arguments.length?
+					windowOpen.apply(this, window.Array.from(arguments)):
+					windowOpen.call(this);
+				if (newWindow){
+					// if we use windowOpen from the normal window we see some SOP errors
+					// BUT we need the unwrapped window...
+					singleCallback(getDocument.call(newWindow).defaultView);
+				}
+				return newWindow;
+			}, window)
+		);
+	}
+	
 	scope.protect = function protect(window, wrappedWindow, singleCallback, allCallback){
 		const changeProperty = createChangeProperty(window);
 		
@@ -280,5 +306,7 @@
 		
 		// MutationObserver does not trigger fast enough when document.write is used
 		protectDocumentWrite(api);
+		
+		protectWindowOpen(api);
 	};
 }());