Skip to content

Improve security of visitUrl implementation -- part 1

Eduardo Sanz García requested to merge eduardosanz/improve-security-visitUrl into master

What does this MR do and why?

Improve security of visitUrl implementation

This new simplified implementation of window.open on visitUrl allows not only to set window.opener to null but to remove the referrer information.

"noopener noreferrer" is the same as "noreferrer" from https://html.spec.whatwg.org/multipage/links.html#link-type-noreferrer

MR acceptance checklist

Please evaluate this MR against the MR acceptance checklist. It helps you analyze changes to reduce risks in quality, performance, reliability, security, and maintainability.

Screenshots or screen recordings

No change

How to set up and validate locally

Edited by Eduardo Sanz García

Merge request reports