search

google / WebFundamentals

Former git repo for WebFundamentals on developers.google.com
Apache License 2.0
13.85k stars 2.57k forks source link

catch cross-origin links that do not use rel=noopener #6918

Open kaycebasques opened 5 years ago

kaycebasques commented 5 years ago

repro

  1. go to developers.google.com/web/tools/lighthouse/audits/noopener
  2. inspect one of the external links

expected

external links have rel="noopener"

actual

unsafe external links :|

petele commented 5 years ago

I'm seeing rel="noopener" on links.