[Link] Add a noopener attribute on external link #2902
Open
Description
Feature Request
Is your feature request related to a problem? Please describe.
We don't use the rel="noopener" attribute on all our external links. A recent audit reports that we should add it to avoid security issues.
Describe the solution you'd like
It would be great to add automatically the rel attribute like :
<a href="target_page" target="_blank" title="Label - New window" rel="noreferrer noopener">Label</a>
Noopener
- How it works: When using target="_blank" to open a link in a new tab, the linked page may partially navigate to the original page via window.opener, which can be exploited for phishing attacks. The rel="noopener" attribute prevents this behavior by telling the browser not to set window.opener, thereby protecting the original page.
- Usage: When a link is opened in a new tab with target="_blank".
Noreferrer
- How it works: Similar to noopener, it prevents the opened site from manipulating window.opener and prevents the browser from sending the referring page address.
- Use: For external no-trusted links.
- Impact: On statistics, it can distort the data by reporting more direct traffic.
Documentation
Metadata
Assignees
Labels
No labels