var open_ = window.open;
window.open = function(url, name, opts) {
return open_(url, name, opts);
}
Then you can add your own checking / modifications right before the window is opened.
To add CSP to root if sort of funny. The following will NOT work for most cases !! <LocationMatch "^/$"> Header s...