[wp-trac] [WordPress Trac] #59856: target=_blank without noopener security issue in wp-admin/edit-form-advanced.php (and others)

[WordPress Trac]

#59856: target=_blank without noopener security issue in wp-admin/edit-form-
advanced.php (and others)
--------------------------+-----------------------------
 Reporter:  jaydub44      |      Owner:  (none)
     Type:  defect (bug)  |     Status:  new
 Priority:  normal        |  Milestone:  Awaiting Review
Component:  General       |    Version:
 Severity:  normal        |   Keywords:
  Focuses:                |
--------------------------+-----------------------------
 Hi Team,

 We noticed some use of target=_blank without noopener in some of the php
 files, should this be considered a security hole?


 Some instances:
 wp-admin/edit-form-advanced.php:                ' <a target="_blank"
 href="%1$s">%2$s</a>',
 wp-admin/edit-form-advanced.php:                ' <a target="_blank"
 href="%1$s">%2$s</a>',
 wp-admin/edit-form-advanced.php:                ' <a target="_blank"
 href="%1$s">%2$s</a>',
 wp-admin/edit-form-advanced.php:                ' <a target="_blank"
 href="%1$s">%2$s</a>',

 Why we think this might be an issue: https://medium.com/sedeo/how-to-fix-
 target-blank-a-security-and-performance-issue-in-web-pages-2118eba1ce2f

-- 
Ticket URL: <https://core.trac.wordpress.org/ticket/59856>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform