From 30531ffa3faaf2d9d5e7f97047371a4a103000c2 Mon Sep 17 00:00:00 2001 From: Ben McCann <322311+benmccann@users.noreply.github.com> Date: Wed, 3 Jan 2024 05:49:40 -0800 Subject: [PATCH 1/3] docs: clarify meaning of `allowReferrer` --- docs/rules/no-target-blank.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/docs/rules/no-target-blank.md b/docs/rules/no-target-blank.md index 401124a2e..3eb868bbf 100644 --- a/docs/rules/no-target-blank.md +++ b/docs/rules/no-target-blank.md @@ -46,8 +46,8 @@ This rule disallows using `target="_blank"` attribute without `rel="noopener nor } ``` -- `allowReferrer` ... If `true`, does not require noreferrer.default `false` -- `enforceDynamicLinks ("always" | "never")` ... If `always`, enforces the rule if the href is a dynamic link. default `always`. +- `allowReferrer` ... If `true`, allows the `Referrer` header to be sent by not requiring `noreferrer` to be present. default `false` +- `enforceDynamicLinks ("always" | "never")` ... If `always`, enforces the rule if the href is a dynamic link. default `always` ### `{ allowReferrer: false }` (default) From d5b69e38b920d9758dfd0bc9f0058e140ca2e6c8 Mon Sep 17 00:00:00 2001 From: Ben McCann <322311+benmccann@users.noreply.github.com> Date: Wed, 3 Jan 2024 06:09:11 -0800 Subject: [PATCH 2/3] Update no-target-blank.md --- docs/rules/no-target-blank.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/docs/rules/no-target-blank.md b/docs/rules/no-target-blank.md index 3eb868bbf..9eb38fe31 100644 --- a/docs/rules/no-target-blank.md +++ b/docs/rules/no-target-blank.md @@ -12,7 +12,7 @@ since: 'v0.0.4' ## :book: Rule Details -This rule disallows using `target="_blank"` attribute without `rel="noopener noreferrer"` to avoid a security vulnerability([see here for more details](https://mathiasbynens.github.io/rel-noopener/)). +This rule disallows using `target="_blank"` attribute without `rel="noopener noreferrer"` to avoid a security vulnerability in legacy browsers ([see here for more details](https://mathiasbynens.github.io/rel-noopener/)). From 3ce7eb45d1d77ede0494566bcfee7b7383aaa385 Mon Sep 17 00:00:00 2001 From: Ben McCann <322311+benmccann@users.noreply.github.com> Date: Wed, 3 Jan 2024 06:13:59 -0800 Subject: [PATCH 3/3] Update no-target-blank.md --- docs/rules/no-target-blank.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/docs/rules/no-target-blank.md b/docs/rules/no-target-blank.md index 9eb38fe31..836a4381f 100644 --- a/docs/rules/no-target-blank.md +++ b/docs/rules/no-target-blank.md @@ -12,7 +12,7 @@ since: 'v0.0.4' ## :book: Rule Details -This rule disallows using `target="_blank"` attribute without `rel="noopener noreferrer"` to avoid a security vulnerability in legacy browsers ([see here for more details](https://mathiasbynens.github.io/rel-noopener/)). +This rule disallows using `target="_blank"` attribute without `rel="noopener noreferrer"` to avoid a security vulnerability in legacy browsers where a page can trigger a navigation in the opener regardless of origin ([see here for more details](https://mathiasbynens.github.io/rel-noopener/)).