Seoxpert.io
Get started
mediumSecurity

External Links with target="_blank" Missing rel="noopener"

External links with target="_blank" must include rel="noopener noreferrer" to prevent security risks like tabnapping.

By Seoxpert Editorial · Published

Why it matters

When external links open in a new tab without rel="noopener", the new page can access and manipulate the original window using window.opener. This exposes users to tabnapping attacks, which can compromise security and user trust. While not a direct SEO ranking factor, it affects site safety and reputation.

Impact

Leaving this unresolved exposes users to potential security threats from malicious external sites.

How it's detected

An automated crawler scans for <a> tags with target="_blank" that lack rel="noopener" or rel="noreferrer" attributes.

Common causes

  • •Forgetting to add rel="noopener noreferrer" when using target="_blank"
  • •Copy-pasting outdated HTML link patterns
  • •Lack of awareness of tabnapping vulnerabilities
  • •Using CMS or WYSIWYG editors that do not add rel attributes by default

How to fix it

Review all <a> tags with target="_blank" and add rel="noopener noreferrer" to each. This prevents the new tab from accessing the window.opener property. Update templates and components to include these attributes by default. Test your site to ensure all external links are updated.

Code examples

Problematic Example

<a href="https://external-site.com" target="_blank">Visit External Site</a>

Corrected Example

<a href="https://external-site.com" target="_blank" rel="noopener noreferrer">Visit External Site</a>

FAQ

Why is rel="noopener" important for target="_blank" links?

Without rel="noopener", the new tab can access the original page via window.opener, posing a security risk.

Is rel="noreferrer" required along with rel="noopener"?

rel="noopener" is essential for security; rel="noreferrer" also prevents referrer information from being sent, and is commonly recommended together.

Does this issue affect SEO rankings?

It does not directly affect rankings, but improves user safety and site trust, which are important for reputation.

Do I need to update internal links with target="_blank"?

The risk is primarily with external links; internal links are less vulnerable but adding rel="noopener" is still good practice.

Found this issue on your site?

Run a scan to see if External Links with target="_blank" Missing rel="noopener" affects your pages.

Scan my website →