Changeset 49215 for trunk/src/wp-login.php

Timestamp:

10/19/2020 11:37:53 PM (3 years ago)

Author:

SergeyBiryukov

Message:

General: Remove noreferrer from wp_targeted_link_rel() and other uses.

When noopener noreferrer was originally added in #37941 and related tickets, the noreferrer bit was specifically included due to Firefox not supporting noopener at the time.

Since noopener has been supported by all major browsers for a while, it should now be safe to remove the noreferrer attribute from core.

Props Mista-Flo, audrasjb, joostdevalk, jonoaldersonwp, peterwilsoncc, elgameel.
Fixes #49558.

File:

• trunk/src/wp-login.php (modified) (2 diffs)

trunk/src/wp-login.php

@@ -690 +690 @@
 
                 printf(
-                    '<a href="%s" rel="noopener noreferrer" target="_blank">%s%s</a>',
+                    '<a href="%s" rel="noopener" target="_blank">%s%s</a>',
                     esc_url( $admin_email_help_url ),
                     __( 'Why is this important?' ),
@@ -1541 +1541 @@
                         if ( links[i].href ) {
                             links[i].target = '_blank';
-                            links[i].rel = 'noreferrer noopener';
+                            links[i].rel = 'noopener';
                         }
                     }