WordPress.org

Make WordPress Core


Ignore:
Timestamp:
10/19/2020 11:37:53 PM (12 months ago)
Author:
SergeyBiryukov
Message:

General: Remove noreferrer from wp_targeted_link_rel() and other uses.

When noopener noreferrer was originally added in #37941 and related tickets, the noreferrer bit was specifically included due to Firefox not supporting noopener at the time.

Since noopener has been supported by all major browsers for a while, it should now be safe to remove the noreferrer attribute from core.

Props Mista-Flo, audrasjb, joostdevalk, jonoaldersonwp, peterwilsoncc, elgameel.
Fixes #49558.

File:
1 edited

Legend:

Unmodified
Added
Removed
  • trunk/src/wp-login.php

    r49110 r49215  
    690690
    691691                printf(
    692                     '<a href="%s" rel="noopener noreferrer" target="_blank">%s%s</a>',
     692                    '<a href="%s" rel="noopener" target="_blank">%s%s</a>',
    693693                    esc_url( $admin_email_help_url ),
    694694                    __( 'Why is this important?' ),
     
    15411541                        if ( links[i].href ) {
    15421542                            links[i].target = '_blank';
    1543                             links[i].rel = 'noreferrer noopener';
     1543                            links[i].rel = 'noopener';
    15441544                        }
    15451545                    }
Note: See TracChangeset for help on using the changeset viewer.