-
-
Notifications
You must be signed in to change notification settings - Fork 27
Open
Labels
Status: TriagingIssue is still being evaluated. PRs not yet accepted.Issue is still being evaluated. PRs not yet accepted.
Description
According to caniuse, all modern browsers now treat target="_blank"
as if rel="noopener"
were set. MDN confirms this as well:
Setting
target="_blank"
on<a>
,<area>
, and<form>
elements implicitly provides the same behavior asrel="noopener"
, meaningwindow.opener
is not set.
Given this, it seems that the current rule may be based on assumptions about outdated browser behavior. As a result, the recommendation may now create more friction for users than actual security benefit.
I realize this is easy to disable locally, and I will do so for my setup. I just wanted to raise the point upstream in case it’s of interest. If not, feel free to close this issue without further action.
timlogemann and oliverjam
Metadata
Metadata
Assignees
Labels
Status: TriagingIssue is still being evaluated. PRs not yet accepted.Issue is still being evaluated. PRs not yet accepted.