Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

I want all links on my website to be rel=noopener #316

Open
kdzwinel opened this issue Jun 20, 2018 · 1 comment

Comments

Projects
None yet
2 participants
@kdzwinel
Copy link

commented Jun 20, 2018

There were three related topics being discussed at the same time in w3c/webappsec#139:

  1. how a website can say "I want all my links to be rel=noopener!" (so that the openee can't send me any messages)
  2. how a website can say "I want to always be opened as if rel=noopener was set on a link that opened me!" (so that the opener can't send me any messages)
  3. how the API for 1 and/or 2 should look like (CSP? separate header? etc.)

#194 follows up on 2 & 3, but @annevk suggested I should open a new issue for 1.

@andypaicu

This comment has been minimized.

Copy link
Collaborator

commented Sep 12, 2018

I think whatwg/html#3740 is relevant. I don't think CSP will do this in the near future.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
You can’t perform that action at this time.