diff options
| author | Craig Jennings <c@cjennings.net> | 2024-04-07 13:41:34 -0500 |
|---|---|---|
| committer | Craig Jennings <c@cjennings.net> | 2024-04-07 13:41:34 -0500 |
| commit | 754bbf7a25a8dda49b5d08ef0d0443bbf5af0e36 (patch) | |
| tree | f1190704f78f04a2b0b4c977d20fe96a828377f1 /devdocs/html/attributes%2Frel%2Fnoopener.html | |
new repository
Diffstat (limited to 'devdocs/html/attributes%2Frel%2Fnoopener.html')
| -rw-r--r-- | devdocs/html/attributes%2Frel%2Fnoopener.html | 53 |
1 files changed, 53 insertions, 0 deletions
diff --git a/devdocs/html/attributes%2Frel%2Fnoopener.html b/devdocs/html/attributes%2Frel%2Fnoopener.html new file mode 100644 index 00000000..ec1438cc --- /dev/null +++ b/devdocs/html/attributes%2Frel%2Fnoopener.html @@ -0,0 +1,53 @@ +<header><h1>rel=noopener</h1></header><div class="section-content"> +<p>The <code>noopener</code> keyword for the <a href="../rel"><code>rel</code></a> attribute of the <a href="../../element/a"><code><a></code></a>, <a href="../../element/area"><code><area></code></a>, and <a href="../../element/form"><code><form></code></a> elements instructs the browser to navigate to the target resource without granting the new browsing context access to the document that opened it — by not setting the <a href="https://developer.mozilla.org/en-US/docs/Web/API/Window/opener"><code>Window.opener</code></a> property on the opened window (it returns <code>null</code>).</p> <p>This is especially useful when opening untrusted links, in order to ensure they cannot tamper with the originating document via the <a href="https://developer.mozilla.org/en-US/docs/Web/API/Window/opener"><code>Window.opener</code></a> property (see <a href="https://mathiasbynens.github.io/rel-noopener/" target="_blank">About rel=noopener</a> for more details), while still providing the <code>Referer</code> HTTP header (unless <code>noreferrer</code> is used as well).</p> <p>Note that when <code>noopener</code> is used, nonempty target names other than <code>_top</code>, <code>_self</code>, and <code>_parent</code> are all treated like <code>_blank</code> in terms of deciding whether to open a new window/tab.</p> <div class="notecard note" id="sect1"> <p><strong>Note:</strong> Setting <code>target="_blank"</code> on <code><a></code> elements now implicitly provides the same <code>rel</code> behavior as setting <code>rel="noopener"</code> which does not set <code>window.opener</code>. See <a href="../../element/a#browser_compatibility">browser compatibility</a> for support status.</p> </div> +</div> +<h2 id="specifications">Specifications</h2> +<div class="_table"><table class="standard-table"> +<thead><tr><th scope="col">Specification</th></tr></thead> +<tbody><tr><td><a href="https://html.spec.whatwg.org/multipage/links.html#link-type-noopener">HTML Standard <br><small># link-type-noopener</small></a></td></tr></tbody> +</table></div> +<h2 id="browser_compatibility">Browser compatibility</h2> +<div class="_table"><table> +<thead> +<tr id="bct-browser-type"> +<th></th> +<th colspan="6">Desktop</th> +<th colspan="6">Mobile</th> +</tr> +<tr id="bct-browsers"> +<th></th> +<th>Chrome</th> +<th>Edge</th> +<th>Firefox</th> +<th>Internet Explorer</th> +<th>Opera</th> +<th>Safari</th> +<th>WebView Android</th> +<th>Chrome Android</th> +<th>Firefox for Android</th> +<th>Opera Android</th> +<th>Safari on IOS</th> +<th>Samsung Internet</th> +</tr> +</thead> +<tbody><tr> +<th><code>noopener</code></th> +<td class="bc-supports-yes">49</td> +<td class="bc-supports-yes">79</td> +<td class="bc-supports-yes"><details><summary>52</summary>Before Firefox 63, <code>rel="noopener"</code> created windows with all features disabled by default. Starting with Firefox 63, these windows have the same features enabled by default as any other window.</details></td> +<td class="bc-supports-no">No</td> +<td class="bc-supports-yes">36</td> +<td class="bc-supports-yes">10.1</td> +<td class="bc-supports-yes">49</td> +<td class="bc-supports-yes">49</td> +<td class="bc-supports-yes"><details><summary>52</summary>Before Firefox 63, <code>rel="noopener"</code> created windows with all features disabled by default. Starting with Firefox 63, these windows have the same features enabled by default as any other window.</details></td> +<td class="bc-supports-yes">36</td> +<td class="bc-supports-yes">10.3</td> +<td class="bc-supports-yes">5.0</td> +</tr></tbody> +</table></div><div class="_attribution"> + <p class="_attribution-p"> + © 2005–2023 MDN contributors.<br>Licensed under the Creative Commons Attribution-ShareAlike License v2.5 or later.<br> + <a href="https://developer.mozilla.org/en-US/docs/Web/HTML/Attributes/rel/noopener" class="_attribution-link">https://developer.mozilla.org/en-US/docs/Web/HTML/Attributes/rel/noopener</a> + </p> +</div> |
