Problem/Motivation

The projects/modules have a few of links that open in a new window.

Form:
https://web.dev/external-anchors-use-rel-noopener/

When you link to a page on another site using the target="_blank" attribute, you can expose your site to performance and security issues:

The other page may run on the same process as your page. If the other page is running a lot of JavaScript, your page's performance may suffer.
The other page can access your window object with the window.opener property. This may allow the other page to redirect your page to a malicious URL.

Adding rel="noopener" or rel="noreferrer" to your target="_blank" links avoids these issues.

Steps to reproduce

Visit the browser page.

Proposed resolution

Add rel="noopener" or rel="noreferrer" to your target="_blank" links

Remaining tasks

TBD

User interface changes

TBD

API changes

TBD

Data model changes

TBD

Comments

thejimbirch created an issue. See original summary.

  • grasmash committed 5d059f7 on 1.0.x
    Issue #3224695: Links to cross-origin destinations are unsafe
    
grasmash’s picture

Status: Active » Fixed

Status: Fixed » Closed (fixed)

Automatically closed - issue fixed for 2 weeks with no activity.

grasmash’s picture