Bug #20455
closed
Add rel=”noopener” to anywhere we use target="_blank"
Description
When using target="_blank" the new tab will have a relationship with the original tab, in fact they will share the same Javascript context (!). This means the tabs can interfere each other -- if something on one tab is slow or memory hungry it can crash all the other tabs it is connected to by the "open in new tab" behavior.
Adding rel="noopener" prevents that behavior.
(on further research, it seems some browsers now set this by default as a security measure, but we should be explicit about it).
Updated by Peter Amstutz 10 months ago
- Target version changed from Future to Development 2024-03-13 sprint
Updated by Peter Amstutz 10 months ago
20455-noopener @ 2aff408211e84a226af6f74cb9338cbaf3fc4645
It was used in a bunch of places already but not everywhere.
I removed "noreferrer" as this does something different (it prevents
passing the "Referer" header when opening the new URL). It's not
clear users benefits from suppressing the information that they
navigated to a link from workbench.
Updated by
Updated by Peter Amstutz 9 months ago
- Target version changed from Development 2024-03-13 sprint to Development 2024-03-27 sprint
Updated by Peter Amstutz 9 months ago
- Status changed from In Progress to Resolved