Make WordPress Core

Opened 7 years ago

Closed 7 years ago

Last modified 7 years ago

#41061 closed defect (bug) (duplicate)

HTML editor doesn't add rel=”noopener noreferrer” when you click on an <a></a> that have taget="_blank"

Reported by: pablomiralles's profile pablomiralles Owned by:
Milestone: Priority: normal
Severity: normal Version: 4.8
Component: TinyMCE Keywords:
Focuses: Cc:

Description

Hello! I was writing a post, using the HTML editor (not the Visual) and I saw that when you add a link on this HTML editor (using the link button), it doesn't add you the rel=”noopener noreferrer” when you select the option "open in a new tab", and a few days I read that this was important for security and TinyMCE added it.

I also have to say that on the Visual editor, it only adds you the "noopener" rel. ¿Is that fine?

That's all I have to say,

Thank you for making WordPress better :D

Change History (2)

#1 follow-up: @swissspidy
7 years ago

  • Milestone Awaiting Review deleted
  • Resolution set to duplicate
  • Status changed from new to closed

Hey there,

Welcome to Trac and thanks for your interest in this!

We're already tracking noopener and noreferrer in #37941.

#2 in reply to: ↑ 1 @pablomiralles
7 years ago

Replying to swissspidy:

Hey there,

Welcome to Trac and thanks for your interest in this!

We're already tracking noopener and noreferrer in #37941.

Okay, I was trying to warn that this problems haven't been solved yet. ¿Could I have to copy and paste all I have write here?

Note: See TracTickets for help on using tickets.