Opened 11 months ago
Closed 11 months ago
#63096 closed defect (bug) (fixed)
Remove "noopener" from wp_list_bookmarks() output
| Reported by: |
|
Owned by: |
|
|---|---|---|---|
| Milestone: | 6.8 | Priority: | normal |
| Severity: | normal | Version: | 5.9 |
| Component: | General | Keywords: | has-patch has-screenshots |
| Focuses: | Cc: |
Description
Introduced in [52061].
As stated in [59120], we should remove noopener relation value from wp_list_bookmarks().
Since this was introduced, supported browsers have changed their security policies and no longer allow the opened link to have JavaScript access to the previous tab.
To easily reproduce the issue:
- Install the Link Manager legacy plugin and a theme that supports Widgets, like Twenty Twenty
- Add some links using
target="blanksetting on them - Add a Link widget to a widget area
- Confirm that the link has a
noopenerattribute
Attachments (4)
Change History (11)
This ticket was mentioned in PR #8505 on WordPress/wordpress-develop by @rvouill.
11 months ago
#1
- Keywords has-patch added
#2
@
11 months ago
Hi everyone,
I just tested the patch and it appears to work fine. I compared between current version on my "sandbox" WP website (Twenty-Nineteen theme) + Link Manager plugin. I did the same on the Playground test link (with Twenty-Twenty them + same plugin) and you can find attached the screenshots showing the difference.
Thanks for the patch!
#4
@
11 months ago
Hi,
I just tested, before the patch (with Twenty Twenty on my local) and after the patch (Twenty Seventeen on Playground).
"noopener" before the patch on the target="_blank" link and no more "noopener" after the patch on the target="_blank" link. So it's all good :)
https://core.trac.wordpress.org/ticket/63096