pull down to refresh

6 sats \ 2 replies \ @ek OP 9 Nov \ parent \ on: ChessMakta gaming
Mhh, looks like we always set noreferrer for links for some reason. I thought we intended that good posts (or boosted posts) wouldn't set noreferrer for links in them but this logic seems to only apply to nofollow which is for search engines. Maybe that's a bug.
/cc @k00b
write
preview
103 sats \ 1 reply \ @k00b 9 Nov
https://www.jitbit.com/alexblog/256-targetblank---the-most-underestimated-vulnerability-ever/
reply
3 sats \ 0 replies \ @ek OP 9 Nov
Ah, so we need to set noreferrer because Firefox doesn't support noopener?
It seems to support it according to MDN. But this confuses me:
Before Firefox 63, rel="noopener" created windows with all features disabled by default. Starting with Firefox 63, these windows have the same features enabled by default as any other window.
So I guess Firefox "supports" noopener but not in the ways we want? This sounds like it actually does nothing 🤔
reply