Hacker News Reader

They disclosed this vulnerability today but it appears the information on the vuln scare site is outdated. Bit sloppy.

I think users here, including myself, got confused because there is a feature flag that has a similar name.

"Swap Processes on Cross-Site Navigation" is enabled by default, but this paper recommends "Swap Processes on Cross-Site Window Open".