[N3WBI3]

Here is the bit of JavaScript that they are using to do this

<script language="JavaScript" type="text/javascript">
var o_height = 768;
var o_width = 1024;

if ( screen.width > 100 )
{
o_width = screen.width;
}

if ( screen.height > 100 )
{
o_height = screen.height;
}

function run()
{
if ( window.opera )
{

window.open('http://www.google.com.secunia.com/tests/origin_spoof.php', '_blank', 'height=1,width=1,left=3000,top=3000,resizable=no,scrollbars=no');
}
else
{
window.open('http://www.google.com.secunia.com/tests/origin_spoof.php', '_blank', 'height=1,width=1,resizable=no,scrollbars=no,left=' + ((o_width / 2) - 50) + ',top=' + ((o_height / 2) - 150) ); }
window.focus();
}
</script>

[N3WBI3]

And of course here is how you would call that function

(a href="http://www.google.com/" onclick="run();")

[atomic_dog]

Here's how you stop it for Firefox.
Firefox NoScript Extension.

[Craigon]

Does the "NoScript" Extension in Firfox take care of this?

https://addons.mozilla.org/extensions/?application=firefox

I just installed it yesterday, and it seemed to crash FireFox when I had the "Auto Reload Page after permission change" turned on.