codeconnector / codeconnector.github.io

The Code Connector website
https://codeconnector.io/
17 stars 17 forks source link

Links to cross-origin destinations are unsafe #29

Closed rjbeers closed 4 years ago

rjbeers commented 4 years ago

This lighthouse report shows that links to external sites are not protected from window.opener being accessed on the linked page.

Add rel="noopener" or rel="noreferrer" to any external links to improve performance and prevent security vulnerabilities.

web.dev has more details.

I think rel="noopener" makes more sense than rel="noreferrer" in these cases.