@gitlab/ui
Version:
GitLab UI Components
5 lines (3 loc) • 374 B
Markdown
When setting target to `_blank`, the rel attribute gets set automatically to "noopener noreferrer", this is done to avoid the `window.opener` [API exploit]. If you set the `rel` attribute manually, this will overwrite the aforementioned logic.
[]: https://www.jitbit.com/alexblog/256-targetblank---the-most-underestimated-vulnerability-ever/