TB11 window.name
window.name
[1] protection added in FF82 is missing in TB11, but has been enabled by default in Firefox since FF86 (including ESR91)
For some reason this is default false in TB
/* enforce "window.name" protection [FF82+]
* If a new page from another domain is loaded into a tab, then window.name is set to an empty string. The original
* string is restored if the tab reverts back to the original page. This change prevents some cross-site attacks
* [TEST] https://arkenfox.github.io/TZP/tests/windownamea.html ***/
user_pref("privacy.window.name.update.enabled", true); // [DEFAULT: true]
[1] https://blog.mozilla.org/security/2021/04/19/firefox-88-combats-window-name-privacy-abuses/ - IDK why they say FF88 ¯\_(?)_/¯