Skip to content
This repository was archived by the owner on Nov 4, 2024. It is now read-only.

detection of rel="noopener noreferrer" on target="_blank" links #217

Open
april opened this issue Mar 2, 2017 · 3 comments
Open

detection of rel="noopener noreferrer" on target="_blank" links #217

april opened this issue Mar 2, 2017 · 3 comments

Comments

@april
Copy link
Contributor

april commented Mar 2, 2017

Hi there,

I wonder if it could be possible to add a test that detects every link with a target="_blank" also have rel="noopener noreferrer" ? (See https://mathiasbynens.github.io/rel-noopener/ for example of security issue that it creates)

Thanks a lot for reading this ;)
Nicolas

Moved from:
mozilla/http-observatory-website#94

@april
Copy link
Contributor Author

april commented Mar 2, 2017

Not a bad idea, I'll add it to the list. :)

@Malvoz
Copy link

Malvoz commented Aug 8, 2019

Note that rel="opener" is a new link relation (rel is also supported in the <form> element now, if that'd matter for how the check is implemented).

Additionally, this is related to #359.

@Malvoz
Copy link

Malvoz commented Aug 8, 2019

Actually, noopener should be default in browsers per https://github.com/whatwg/html/pull/4330/files, so I suppose you'd perhaps want to give a negative score for rel="opener" instead of giving positive score for rel="noopener".

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Projects
None yet
Development

No branches or pull requests

3 participants