WordPress.org
Get WordPress

Make WordPress Core

Opened 6 years ago

Closed 21 months ago

Last modified 21 months ago

#46479 closed enhancement (worksforme)

Set rel=noopener in comment fields

Reported by: vanitasvitae's profile vanitasvitae Owned by: audrasjb's profile audrasjb
Milestone: Priority: normal
Severity: normal Version: 5.2
Component: Comments Keywords: close
Focuses: Cc:

Description

It is probably a good idea to set rel=noopener in user-controlled fields in the comment section (eg. username, user-website, comment field).

Background: ​https://mathiasbynens.github.io/rel-noopener/

Change History (4)

#1 @audrasjb
6 years ago

  • Component changed from General to Comments
  • Owner set to audrasjb
  • Status changed from new to reviewing

#2 @Presskopp
21 months ago

  • Keywords close added
  • Resolution set to worksforme
  • Status changed from reviewing to closed

It's no longer needed since browsers now implicitly set rel=noopener for any target=_blank link, following a spec change. You can find out more by clicking the ​same link the reporter has provided.

See also:
​https://caniuse.com/mdn-html_elements_a_implicit_noopener

#4 @peterwilsoncc
21 months ago

  • Milestone Awaiting Review deleted
Note: See TracTickets for help on using tickets.