function handleABPLinkClicks() {
  // Subscribe to the list when you click an abp: link
  var elems = document.querySelectorAll('[href^="abp:"], [href^="ABP:"]');
  var abplinkhandler = function(event) {
    event.preventDefault();
    var searchquery = this.href.replace(/^.+?\?/, '?');
    if (searchquery) {
      var queryparts = parseUri.parseSearch(searchquery);
      var loc = queryparts.location;
      var reqLoc = queryparts.requiresLocation;
      var reqList = (reqLoc ? "url:" + reqLoc : undefined);
      var title = queryparts.title;
      if (abConfirm(translate("subscribeconfirm", (title || loc)))) {
        BGcall("subscribe", {id: "url:" + loc, requires: reqList, title: title});
        // Open subscribe popup
        if (SAFARI) {
          // In Safari, window.open() cannot be used
          // to open a new window from our global HTML file
          window.open(chrome.extension.getURL('pages/subscribe.html?' + loc),
                      "_blank",
                      'scrollbars=0,location=0,resizable=0,width=450,height=150');
        } else {
          BGcall("launch_subscribe_popup", loc);
        }
      }
    }
  };
  for (var i=0; i<elems.length; i++) {
    elems[i].addEventListener("click", abplinkhandler, false);
  }
}
The software does not restrict or incorrectly restricts access to a resource from an unauthorized actor.