[wp-trac] [WordPress Trac] #49558: Remove noreferrer from wp_targeted_link_rel and other uses

WordPress Trac noreply at wordpress.org
Mon Mar 2 07:48:39 UTC 2020


#49558: Remove noreferrer from wp_targeted_link_rel and other uses
-------------------------+-----------------------------
 Reporter:  joostdevalk  |      Owner:  (none)
     Type:  enhancement  |     Status:  new
 Priority:  normal       |  Milestone:  Awaiting Review
Component:  General      |    Version:
 Severity:  normal       |   Keywords:
  Focuses:               |
-------------------------+-----------------------------
 When we added `noopener noreferrer` in #37941, the `noreferrer` bit was
 added specifically because at the time, Firefox didn't support `noopener`.
 Since it does now and has for a while, see
 [https://caniuse.com/#search=noopener here], I think we should remove it,
 as it does have nasty side effects: it breaks cross-site analytics.

 We should remove it everywhere, as links in the admin don't send a
 referrer anyway after [https://core.trac.wordpress.org/changeset/41741
 41741] and as such there's no security risk to removing it.

-- 
Ticket URL: <https://core.trac.wordpress.org/ticket/49558>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform


More information about the wp-trac mailing list