Re:Practical privacy tips for your business
by chrismorgan on Friday May 29, 2020 @01:25AM
(#23346530)
For remote links, you should add rel=noopener as well, to prevent reverse tabnapping.
Combined with rel=noreferrer, that’ll be rel="noopener noreferrer".
Update: sorry, this is not necessary. noreferrer implies noopener (https://html.spec.whatwg.org/multipage/links.html#link-type-...). But while a Referrer-Policy of no-referrer renders rel=noreferrer unnecessary, you still want rel=noopener, so you might as well go with rel=noreferrer. referrerpolicy=no-referrer is superfluous in this location.
Combined with rel=noreferrer, that’ll be rel="noopener noreferrer".
Update: sorry, this is not necessary. noreferrer implies noopener (https://html.spec.whatwg.org/multipage/links.html#link-type-...). But while a Referrer-Policy of no-referrer renders rel=noreferrer unnecessary, you still want rel=noopener, so you might as well go with rel=noreferrer. referrerpolicy=no-referrer is superfluous in this location.