There are many sites on the internet that recommend you to add the noopener noreferrer
attributes to your link as a safety measure. This is to avoid malicious scripts from other domains to take control of your window (for a link with target="_blank"
).
There's even an eslint
rule to make sure of that:
https://github.com/yannickcr/eslint-plugin-react/blob/master/docs/rules/jsx-no-target-blank.md`
https://mathiasbynens.github.io/rel-noopener/
QUESTION
I get the noopener
part. It makes sense. But do I really need the noreferrer
to be safe?