Ticket #36809: 36809.patch

src/wp-includes/class-walker-nav-menu.php

@@ -158 +158 @@
                 $atts['rel']    = ! empty( $item->xfn )        ? $item->xfn        : '';
                 $atts['href']   = ! empty( $item->url )        ? $item->url        : '';
 
+                if( $item->target === '_blank' ){
+                        $atts['rel'] .= ' noopener noreferrer';
+                        $atts['rel'] = trim( $atts['rel'] );
+                }
+
                 /**
                  * Filters the HTML attributes applied to a menu item's anchor element.
                  *

src/wp-includes/js/wplink.js

@@ -304 +304 @@
 
                         return {
                                 href: $.trim( inputs.url.val() ),
-                                target: inputs.openInNewTab.prop( 'checked' ) ? '_blank' : null
+                                target: inputs.openInNewTab.prop( 'checked' ) ? '_blank' : null,
+                                rel: inputs.openInNewTab.prop( 'checked' ) ? 'noopener noreferrer' : null
                         };
                 },