Graybeard --> Link types: noopener (how?)

[Honeybadger]

@Graybeard
Wordpress adds this to external links
"noopener"
says it's for security
to stop page being linked to access the linking web page
wtf? how is this possible?
feel free to get all technical
TYVM

 

[Honeybadger]

rel=”noopener”
automatically added HTML attribute
to outbound links in new window
something to do with

• browser sessions
• window.opener
• leaving your page open to attach
• running in a separate process

way above my pay grade

 

[Graybeard]

The other page can access your window object with the window.opener property. This may allow the other page to redirect your page to a malicious URL.

Links to cross-origin destinations are unsafe | Lighthouse | Chrome for Developers

Learn how to safely link to resources on another host.

web.dev

What they are not saying is that WordPress hacks/exploits inject JavaScript redirects into the WP-databases and they will appear with your content and 'do something' making your WP become a slave-bot and getting a SEO ban as a malicious site (eventually).