Ticket #40916: 40916.rel.diff

src/wp-admin/includes/class-wp-comments-list-table.php

@@ -947 +947 @@
                 echo '</strong><br />';
 
                 if ( ! empty( $author_url_display ) ) {
-                        printf( '<a href="%s">%s</a><br />', esc_url( $author_url ), esc_html( $author_url_display ) );
+                        // Print link to author URL, and disallow referrer information (without using target="_blank").
+                        printf( '<a href="%s" rel="noopener noreferrer">%s</a><br />', esc_url( $author_url ), esc_html( $author_url_display ) );
                 }
 
                 if ( $this->user_can ) {