Feature Request: Add Default rel="noopener" to "New Tab" Links

Beta
#1

Hi @charlie!

Pro offers a convenient option to check the ‘New tab’ checkbox for links, which is great. However, it doesn’t automatically include rel='noopener' , resulting in unsafe cross-origin links. While we can add this manually through Custom Attributes, it would be far more efficient and secure if rel='noopener' were included by default.

Alternatively, a pre-checked ‘noopener’ checkbox could be conditionally displayed whenever ‘New tab’ is selected. That said, I believe the use case for _blank without noopener is extremely rare on WordPress pages, making the default inclusion of noopener the better solution.

Thank you!

3 Likes
#2

I’ll set it as the default in a point release soon. It looks like that is the default behavior for non SSL sites. If it really comes up we need a control for it I will add it. Thanks for the feedback, have a great day.

4 Likes
#3

This is causing an issue with several of our sites. Perhaps if this had always been like this it would be fine but defaulting to this on existing sites is causing issues. It would be awesome if it could be a checkbox setting. I’ve had to go through one of our sites and manually edit a bunch of items. Had to uncheck ‘Open in new tab’ and add target _blank as a custom attribute.

#4

There is an old filter to remove this feature. Let me know if that helps.

add_filter('tco_targeted_link_rel', '__return_false');
1 Like