Make WordPress Core

Opened 7 years ago

Closed 3 years ago

Last modified 3 years ago

#46479 closed enhancement (worksforme)

Set rel=noopener in comment fields

Reported by: vanitasvitae Owned by: audrasjb
Priority: normal Milestone:
Component: Comments Version: 5.2
Severity: normal Keywords: close
Cc: Focuses:

Description

It is probably a good idea to set rel=noopener in user-controlled fields in the comment section (eg. username, user-website, comment field).

Background: https://mathiasbynens.github.io/rel-noopener/

Change History (4)

#1 @audrasjb
7 years ago

  • Component GeneralComments
  • Owner set to audrasjb
  • Status newreviewing

#2 @Presskopp
3 years ago

  • Keywords close added
  • Resolutionworksforme
  • Status reviewingclosed

It's no longer needed since browsers now implicitly set rel=noopener for any target=_blank link, following a spec change. You can find out more by clicking the same link the reporter has provided.

See also:
https://caniuse.com/mdn-html_elements_a_implicit_noopener

#4 @peterwilsoncc
3 years ago

  • Milestone Awaiting Review
Note: See TracTickets for help on using tickets.