rspec/rules/S5148/recommended.adoc

6 lines
283 B
Plaintext
Raw Normal View History

2021-05-11 01:20:07 +00:00
== Recommended Secure Coding Practices
Use ``++noopener++`` to prevent untrusted pages from abusing ``++window.opener++``.
Note: In Chrome 88+, Firefox 79+ or Safari 12.1+ ``++target=_blank++`` on anchors implies ``++rel=noopener++`` which make the protection enabled by default.