• beantown123

    (@beantown123)


    Hi, I have been promoting some affiliate programs and using a plugin to cloak/redirect prettier links to the actual affiliate link.

    I am also experimenting with a content editor, so that the noreferrer and noopener attributes do not automatically get placed on my links like normally happens with WordPress.

    My confusion is whether the noreferrer, noopener and nofollow attributes belong on the cloaked url or on the destination url. With this content editor, it is not as easy to add these attributes to the cloaked url.

    I also was wondering if there is still a security benefit of adding noreferrer or if it is unnecessary.

    Thanks for any help you can provide.

Viewing 2 replies - 1 through 2 (of 2 total)
  • Farhad

    (@farhadvn)

    Hi

    This is one of Google’s recommendations.

    Recommendations
    Add rel=”noopener” or rel=”noreferrer” to each of the links that Lighthouse has identified in your report. In general, when you use target=”_blank”, always add rel=”noopener” or rel=”noreferrer”.


    Example Pet Store

    rel=”noopener” prevents the new page from being able to access the window.opener property and ensures it runs in a separate process.
    rel=”noreferrer” attribute has the same effect, but also prevents the Referer header from being sent to the new page.

    See here for more:

    https://developers.google.com/web/tools/lighthouse/audits/noopener

    Thread Starter beantown123

    (@beantown123)

    Ok so that makes sense for the destination/affiliate URL since it is leaving my site. I am still confused on the cloaked URL since I control that link and it is still staying within my site even if opening in a new window (I believe). I would think that takes away the worry of someone taking over the window.

Viewing 2 replies - 1 through 2 (of 2 total)
  • The topic ‘Confusion on which link to place noopener noreferrer when cloaking url’ is closed to new replies.