tomayac’s Twitter Archive—№ 16,030

@SecurityMB @ChromiumDev Not a security expert, but I don't think so, since you don't know what the actual target text is. The threat model is comparable to that of the ::target pseudo class: developer.mozilla.org/en-US/docs/Web/CSS/:target.