HTML / XML / JS, low-level validity (cross-cutting)LowIndustry consensus
Missing rel=noopener on target=_blank
A link that opens a new tab without rel=noopener lets the new page access the opener via window.opener, a security and minor performance risk. Modern browsers default to it, but I set it explicitly.
What it is
Security gap on new-tab links.
Why it matters
Reverse-tabnabbing risk.
How to fix it
Add rel=“noopener”.
How to find it on your site
- Find links with target=_blank.
- Check whether they include rel=noopener, and noreferrer where wanted.
- Add rel=noopener to new-tab links.
- Re-check the links.
Cross-reference to ranking and citation factors
rel=noopener closes a tab-napping security hole on new-tab links. It is a small but standard safety detail.
Impact
Low; security. Consensus (web security best practice).
Evidence
rel=noopener is a standard security practice (web platform guidance). W3C, Web Content Accessibility Guidelines (WCAG) 2.2