Changeset 45144

Timestamp:

04/08/2019 11:22:14 PM (5 years ago)

Author:

pento

Message:

Widgets: Add rel="noopener noreferrer" to links with target="_blank" in the Image widget.

Props audrasjb, welcher, afercia.
Fixes #43280.

Location:

trunk

Files:

• src/wp-includes/widgets/class-wp-widget-media-image.php (modified) (1 diff)
• tests/phpunit/tests/widgets/media-image-widget.php (modified) (1 diff)

trunk/src/wp-includes/widgets/class-wp-widget-media-image.php

@@ -267 +267 @@
             $link .= $image;
             $link .= '</a>';
-            $image = $link;
+            $image = wp_targeted_link_rel( $link );
         }
 

trunk/tests/phpunit/tests/widgets/media-image-widget.php

@@ -542 +542 @@
         $this->assertContains( '<a href="https://example.org"', $output );
         $this->assertContains( 'target="_blank"', $output );
+        $this->assertContains( 'rel="noopener noreferrer"', $output );
 
         // Populate caption in attachment.