Ticket #46421: 46421.diff

src/wp-includes/widgets/class-wp-widget-custom-html.php

@@ -143 +143 @@
                 /** This filter is documented in wp-includes/widgets/class-wp-widget-text.php */
                 $content = apply_filters( 'widget_text', $instance['content'], $simulated_text_widget_instance, $this );
 
+                // Adds rel noreferrer and noopener to all HTML A elements that have a target.
+                $content = wp_targeted_link_rel( $content );
+
                 /**
                  * Filters the content of the Custom HTML widget.
                  *

src/wp-includes/widgets/class-wp-widget-text.php

@@ -328 +328 @@
 
                 $text = preg_replace_callback( '#<(video|iframe|object|embed)\s[^>]*>#i', array( $this, 'inject_video_max_width_style' ), $text );
 
+                // Adds rel noreferrer and noopener to all HTML A elements that have a target.
+                $text = wp_targeted_link_rel( $text );
+
                 ?>
                         <div class="textwidget"><?php echo $text; ?></div>
                 <?php