Add rel=noopener (#5046)

2025-11-09 10:59:50 +00:00 · 2020-03-04 22:34:48 +01:00
parent 196540afc7
commit d3105b6846
35 changed files with 115 additions and 35 deletions
--- a/src/components/ha-markdown.ts
+++ b/src/components/ha-markdown.ts
@@ -53,6 +53,7 @@ class HaMarkdown extends UpdatingElement {
        node.host !== document.location.host
      ) {
        node.target = "_blank";
+        node.rel = "noreferrer";

        // protect referrer on external links and deny window.opener access for security reasons
        // (see https://mathiasbynens.github.io/rel-noopener/)