The ability to set rel="norefferer noopener" to links that open in new tab

I get the following recommendation in the Problems panel where ever I have a target _blank in a link. I have never heard of this attribute before and is there a way to set that through the UI or do we have to manually enter it in code view?

Screenshot 2026-02-27 at 8.50.17 AM

<a href="https://www.lawryk.ca" target="_blank"><img src="../../assets/images/bradlogo.jpg" class="img-fluid img-thumbnail" alt="Brad Lawryk Logo"></a>

This one is new to me; I had to look this one up.

Apparently opening a new tab gives the new page access to window.opener, which can be abused for tab‑nabbing attacks.

The correct pattern is

<a href="https://example.com" target="_blank" rel="noopener noreferrer">

where the noreferrer also hides the referrer

Why it matters

  • Prevents malicious pages from redirecting your original tab
  • Improves security with zero visual change
1 Like

Maybe this should be a feature request then, to add this attribute to the UI?

1 Like

I have changed this to a feature request to have the attribute added to the UI. Thanks again Ben!

Or even better, have the rel attribute automatically added if target="_blank" on a link.

1 Like

Seems you need both rel="noopener noreferrer" to get rid of the recommendation.

I’m really enjoying the new Problems panel; it keeps my code aligned with modern web standards.

2 Likes

Yeah, it's probably one of the best tools in Wappler for a long time. I am learning so freakin much.

2 Likes