[GH-ISSUE #224] Avoid `target='_blank'` attribute without `rel='noopener noreferrer'` #146

New issue

Open

opened 2026-03-03 11:13:23 +03:00 by kerem · 0 comments

kerem commented

2026-03-03 11:13:23 +03:00

Owner

Originally created by @akhil-naidu on GitHub (Jun 9, 2025).
Original GitHub issue: https://github.com/dflow-sh/dflow/issues/224

Originally assigned to: @charanm927 on GitHub.

Description

When creating a JSX element with a tag, it is often desired to have the link open in a new tab using the target=_blank; attribute. Using this attribute unaccompanied by rel=noreferrer, however, is a severe security vulnerability.

@pavanbhaskardev, ensure the same to be in dflow marketing website too.

Originally created by @akhil-naidu on GitHub (Jun 9, 2025). Original GitHub issue: https://github.com/dflow-sh/dflow/issues/224 Originally assigned to: @charanm927 on GitHub. ## Description When creating a JSX element with a tag, it is often desired to have the link open in a new tab using the `target=_blank;` attribute. Using this attribute unaccompanied by `rel=noreferrer`, however, is a severe security vulnerability. @pavanbhaskardev, ensure the same to be in dflow marketing website too.