theupdateframework / theupdateframework/theupdateframework.io
External links using target="_blank" should include rel="noopener"
Nobody has claimed this yet.
- Dominant language
- HTML
- Stars
- 25
- Forks
- 46
- PR merge metrics
- No merged PRs in 30d
Description
The adoptions.html shortcode opens external links using target="_blank" but does not include a rel attribute. Opening external links with target="_blank" without rel="noopener" can expose the originating page through window.opener.
Proposed change
Update the link to include rel="noopener"
This is a small security hardening change and should not affect the user-facing behavior of the links
Contributor guide
No contributing guide indexed for this repository
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Find the adoptions.html shortcode and inspect the external link that uses target="_blank". Add the requested rel="noopener" attribute, then verify the rendered link retains its existing behavior and includes the security attribute.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- html
- Domain
- security, web-dev
- Issue type
- Bug
- Difficulty
- 1/5
- Estimated time
- Under an hour
- Activity status
- Quiet
- Clarity
- Clearly specified
- Newbie friendliness
- 88/100