brad
February 27, 2026, 4:53pm
1
I get the following recommendation in the Problems panel where ever I have a target _blank in a link. I have never heard of this attribute before and is there a way to set that through the UI or do we have to manually enter it in code view?
<a href="https://www.lawryk.ca" target="_blank"><img src="../../assets/images/bradlogo.jpg" class="img-fluid img-thumbnail" alt="Brad Lawryk Logo"></a>
ben
February 28, 2026, 12:27am
2
This one is new to me; I had to look this one up.
Apparently opening a new tab gives the new page access to window.opener, which can be abused for tab‑nabbing attacks.
The correct pattern is
<a href="https://example.com" target="_blank" rel="noopener noreferrer">
where the noreferrer also hides the referrer
Why it matters
Prevents malicious pages from redirecting your original tab
Improves security with zero visual change
1 Like
brad
February 28, 2026, 12:30am
3
Maybe this should be a feature request then, to add this attribute to the UI?
1 Like
brad
February 28, 2026, 12:54am
4
I have changed this to a feature request to have the attribute added to the UI. Thanks again Ben!
Or even better, have the rel attribute automatically added if target="_blank" on a link.
1 Like
brad
February 28, 2026, 1:05am
5
Seems you need both rel="noopener noreferrer" to get rid of the recommendation.
ben
February 28, 2026, 1:14am
6
I’m really enjoying the new Problems panel; it keeps my code aligned with modern web standards.
2 Likes
brad
February 28, 2026, 1:17am
7
Yeah, it's probably one of the best tools in Wappler for a long time. I am learning so freakin much.
2 Likes