rails-security-checklist

rails-security-checklist copied to clipboard

Set rel="noopener noreferrer" attribute on <a "target=_blank"...> links

More at: https://dev.to/ben/the-targetblank-vulnerability-by-example

Consider if link_to and other link_* helpers should automatically set the rel="noopener noreferrer" attribute if target option is set to _blank or #