[Enhancement] Add rel="noreferrer noopener"
to all external links
#4297
Labels
enhancement
Improvement of an existing feature
module:html
UI issues that can't be tied to a single module
Is your enhancement request related to a problem? Please describe.
I realized that no links contain
rel="noreferrer"
, to instruct the browser to not send theReferer
header. While all recent major browser strip said header to the bare minimum (a domain name only), it remains a privacy leak nonetheless.It might also be a good idea to add
noopener
too. Modern browsers implicitly treatstarget="_blank"
as if they also containedrel="noopener"
(source MDN), but older and more exotic browsers might not.Describe the solution you'd like
Add
rel="noreferrer noopener"
to all outgoing links.Describe alternatives you've considered
N/A
The text was updated successfully, but these errors were encountered: