[wp-trac] [WordPress Trac] #49558: Remove noreferrer from wp_targeted_link_rel and other uses
WordPress Trac
noreply at wordpress.org
Mon Mar 2 07:48:39 UTC 2020
#49558: Remove noreferrer from wp_targeted_link_rel and other uses
-------------------------+-----------------------------
Reporter: joostdevalk | Owner: (none)
Type: enhancement | Status: new
Priority: normal | Milestone: Awaiting Review
Component: General | Version:
Severity: normal | Keywords:
Focuses: |
-------------------------+-----------------------------
When we added `noopener noreferrer` in #37941, the `noreferrer` bit was
added specifically because at the time, Firefox didn't support `noopener`.
Since it does now and has for a while, see
[https://caniuse.com/#search=noopener here], I think we should remove it,
as it does have nasty side effects: it breaks cross-site analytics.
We should remove it everywhere, as links in the admin don't send a
referrer anyway after [https://core.trac.wordpress.org/changeset/41741
41741] and as such there's no security risk to removing it.
--
Ticket URL: <https://core.trac.wordpress.org/ticket/49558>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform
More information about the wp-trac
mailing list