2

This question already has an answer here:

I am learning about the merits of including rel="noopener noreferrer" for external links.

What is the difference between these two attribute values?

marked as duplicate by John Conde Jul 2 '18 at 12:37

This question has been asked before and already has an answer. If those answers do not fully address your question, please ask a new question.

5

rel="noopener" is used so that when a new window is created upon clicking a link, malicious javascript code running in the new window will not access your previous window via the window.opener attribute.

rel=noreferrer is used so that when a user clicks on a hyperlink and is transferred to a new location, no referrer information will be leaked to the destination link. Meaning, it will not be possible for the destination to know when that user came from.

You can find more information about both here and more about no referrer here

  • 1
    OK, I think I see what’s happening. The window is a reference to the actual browser window (or tab) parenting the link, while the referrer is a string with the URL of the parent document. The opener is the one likely to get you into trouble with malicious JavaScript code. According to WHATWG, noopener is implied in noreferer for historical reasons. – Manngo Jul 2 '18 at 7:43

Not the answer you're looking for? Browse other questions tagged or ask your own question.