HTML Security

Question 1

Anchor Tag

How do you secure a link that leads to an external resource?

Answer 1

It is recommended to set attributes that prohibit the opened link from accessing the page from which it was opened.

Adding the “rel” attribute with the “noopener”, “noreferrer”, and “nofollow” values when opening the link in a new tab will block the external resource from accessing the “window.opener” object of the original page and prevent it from passing HTTP headers to it.

This will work for same-origin or cross-origin links.