Potential security risk from unsafe external link

nsiregar / pegelinux

Blog aggregator for pegelinux community

https://pegelinux.id

MIT License

10 stars 9 forks source link

Potential security risk from unsafe external link #72

Closed rezhajulio closed 5 years ago

rezhajulio commented 5 years ago

HTML links that open in a new tab or window allow the target page to access the DOM of the origin page using window.opener unless link type noopener or noreferrer is specified. This is a potential security risk.

References:

https://mathiasbynens.github.io/rel-noopener/
https://cwe.mitre.org/data/definitions/1022.html