@pluralistic

I get the same results in Chrome and Firefox: if you open that URL in a background tab it waits for you to switch to it, so it looks like something Chase is doing on purpose.

When it does render, the url is updated to https://secure.chase.com/web/auth/dashboard#/dashboard/overview

Chase appears to use the "hash" part of the URL as commands. If you try to load that full URL with the hash part then it does seem to render in a background tab just fine in Chrome and Firefox.

@pluralistic
Not sure this is related but since I started using CanvasBlocker addon, they make me use MFA every time with 8 digit pin and pw again. It’s as if part of their auth process is digital fingerprinting. Caveat: I’m not a hacker or expert (in case it wasn’t obvious). Why not just wait for page load? Shpilkes?

https://en.m.wiktionary.org/wiki/shpilkes