HTML link rel noopener & noreferrer All In One

HTML link rel noopener & noreferrer All In One

Web 安全

<a target="_blank" rel="noopener noreferrer">
  Web Security A link ✅
</a>



<a>
  Not Security A link ❌
</a>

noopener & noreferrer

<a target="_blank"> === <a rel="noopener">

https://developer.mozilla.org/en-US/docs/Web/HTML/Attributes/rel/noopener

https://developer.mozilla.org/en-US/docs/Web/HTML/Attributes/rel/noreferrer

window.opener;
// null

https://developer.mozilla.org/en-US/docs/Web/API/Window/opener

https://mathiasbynens.github.io/rel-noopener/

MDN & GitHub

https://github.com/mdn/content/blob/main/files/en-us/web/html/attributes/rel/noreferrer/index.md?plain=1

https://github.com/mdn/content/blob/main/files/zh-cn/web/html/attributes/rel/noreferrer/index.md?plain=1

https://github.com/mdn/content/blob/main/files/zh-hans/web/html/attributes/rel/noreferrer/index.md?plain=1

Referer HTTP request header

https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Referer

Referrer-Policy

https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Referrer-Policy

refs

https://youtu.be/ydkQlJhodio?t=50

https://stackoverflow.com/questions/50709625/link-with-target-blank-and-rel-noopener-noreferrer-still-vulnerable

---

---

©xgqfrms 2012-2020

www.cnblogs.com/xgqfrms 发布文章使用：只允许注册用户才可以访问！

原创文章，版权所有©️xgqfrms, 禁止转载 🈲️，侵权必究⚠️！

---