Skip to content

Add rel='noopener noreferer' to external link#616

Open
kritsii wants to merge 1 commit intowagtail:mainfrom
kritsii:add-noopener
Open

Add rel='noopener noreferer' to external link#616
kritsii wants to merge 1 commit intowagtail:mainfrom
kritsii:add-noopener

Conversation

@kritsii
Copy link

@kritsii kritsii commented Feb 27, 2026

This PR adds rel="noopener noreferrer" to links that use target="_blank".
This improves security by preventing reverse tabnabbing and follows HTML best practices.

@lb-
Copy link
Member

lb- commented Mar 1, 2026

It may be simpler to se this on the root head tag, inside a meta element.

This way it doesn't need to be set on each link individually.

https://developer.mozilla.org/en-US/docs/Web/HTTP/Reference/Headers/Referrer-Policy#integration_with_html

@kritsii
Copy link
Author

kritsii commented Mar 1, 2026

Thanks for the suggestion!
Just to clarify are you suggesting setting a global policy (for example via tag) instead of adding rel = "noopener noreferrer" on individual links? Happy to update implementation accordingly.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants