Changeset 49215 for trunk/src/wp-includes/formatting.php

Timestamp:

10/19/2020 11:37:53 PM (3 years ago)

Author:

SergeyBiryukov

Message:

General: Remove noreferrer from wp_targeted_link_rel() and other uses.

When noopener noreferrer was originally added in #37941 and related tickets, the noreferrer bit was specifically included due to Firefox not supporting noopener at the time.

Since noopener has been supported by all major browsers for a while, it should now be safe to remove the noreferrer attribute from core.

Props Mista-Flo, audrasjb, joostdevalk, jonoaldersonwp, peterwilsoncc, elgameel.
Fixes #49558.

File:

• trunk/src/wp-includes/formatting.php (modified) (3 diffs)

trunk/src/wp-includes/formatting.php

@@ -3154 +3154 @@
 
 /**
- * Adds rel noreferrer and noopener to all HTML A elements that have a target.
+ * Adds `rel="noopener"` to all HTML A elements that have a target.
  *
  * @since 5.1.0
+ * @since 5.6.0 Removed 'noreferrer' relationship.
  *
  * @param string $text Content that may contain HTML A elements.
@@ -3189 +3190 @@
 
 /**
- * Callback to add rel="noreferrer noopener" string to HTML A element.
- *
- * Will not duplicate existing noreferrer and noopener values
- * to prevent from invalidating the HTML.
+ * Callback to add `rel="noopener"` string to HTML A element.
+ *
+ * Will not duplicate an existing 'noopener' value to avoid invalidating the HTML.
  *
  * @since 5.1.0
- *
- * @param array $matches Single Match
- * @return string HTML A Element with rel noreferrer noopener in addition to any existing values
+ * @since 5.6.0 Removed 'noreferrer' relationship.
+ *
+ * @param array $matches Single match.
+ * @return string HTML A Element with `rel="noopener"` in addition to any existing values.
  */
 function wp_targeted_link_rel_callback( $matches ) {
@@ -3220 +3221 @@
      * @param string $link_html The matched content of the link tag including all HTML attributes.
      */
-    $rel = apply_filters( 'wp_targeted_link_rel', 'noopener noreferrer', $link_html );
+    $rel = apply_filters( 'wp_targeted_link_rel', 'noopener', $link_html );
 
     // Return early if no rel values to be added or if no actual target attribute.