Task #89347

Provide strong defaults for anchor noreferred/noopener attribute

Added by Oliver Hader 15 days ago. Updated 15 days ago.

Status:
New
Priority:
Should have
Assignee:
-
Category:
Link Handling, Site Handling & Routing
Start date:
2019-10-04
Due date:
% Done:

0%

TYPO3 Version:
10
PHP Version:
Tags:
Complexity:
Sprint Focus:

Description

Issue #78488 introduced norefferer & noopener per default for external links, see
https://review.typo3.org/c/Packages/TYPO3.CMS/+/59194

However there are scenarios where this has to be seen in context and scope of the website project:

General

  • noopener only has an effect of "opened" window contexts (e.g. target="_blank")
  • noreferrer might contradict tracking & analyzation on websites
    • e.g. "which site is has similar information" - good use of referrer in a scope similar to "LOD"
      • Referrer: https://typo3-website.org/resources/car-engines/abc when opening https://remote-vendor.com/cars/xyz
    • e.g. "which site has similar problems" - bad use of referrer, when e.g. sensitive areas point public resources
      • Referrer: https://typo3-website.org/user-restricted-internal/product-abc-sucks pointing to https://remote-vendor.com/prodct-abc

Suggestion

  • make settings configurable
    • TypoScript typolink
    • Site Configuration anchor behavior
  • default settings (when not having TypoScript or Site Configuration loaded - e.g. CLI context) should be strict noopener noreferrer (current scenario)

Side-note

There is a difference between TYPO3 backend and frontend as well. Basically
  • strict default for backend should be noopener noreferrer
  • individual behavior for frontend as outlined in previous sections

Related issues

Related to TYPO3 Core - Feature #78488: Add rel="noopener noreferrer" to links when target is set to _blank Closed 2016-10-28

History

#1 Updated by Oliver Hader 15 days ago

  • Related to Feature #78488: Add rel="noopener noreferrer" to links when target is set to _blank added

#2 Updated by Oliver Hader 15 days ago

  • Description updated (diff)

Also available in: Atom PDF