HTML Standard Tracker

Filter

File a bug

SVNBugCommentTime (UTC)
1950Extend rel=noreferrer to also blow away the 'opener' when used with target=_blank.2008-07-29 21:53
@@ -28266,22 +28266,40 @@ never reset. This is nice and consistent.)
 
      <dd>The user agent may offer to create a new <span>top-level
      browsing context</span> or reuse an existing <span>top-level
      browsing context</span>. If the user picks one of those options,
      then the designated browsing context must be the chosen one (the
      browsing context's name isn't set to the given browsing context
      name). Otherwise (if the user agent doesn't offer the option to
      the user, or if the user declines to allow a browsing context to
      be used) there must not be a chosen browsing context.</dd>
 
+     <dt id="noopener">If the user agent has been configured such that
+     in this instance it will create a new browsing context, and the
+     browsing context is being requested as part of <span
+     title="following hyperlinks">following a hyperlink</span> whose
+     <a href="#linkTypes">link types</a> include the <code
+     title="rel-noreferrer">noreferrer</code> keyword</dt>
+
+     <dd>A new <span>top-level browsing context</span> must be
+     created. If the given browsing context name is not <code
+     title="">_blank</code>, then the new top-level browsing context's
+     name must be the given browsing context name (otherwise, it has
+     no name). The chosen browsing context must be this new browsing
+     context. If it is immediately <span
+     title="navigate">navigated</span>, then the navigation will be
+     done with <span>replacement enabled</span>.</dd>
+
      <dt>If the user agent has been configured such that in this
-     instance it will create a new browsing context</dt>
+     instance it will create a new browsing context, and the <code
+     title="rel-noreferrer">noreferrer</code> keyword doesn't
+     apply</dt>
 
      <dd>A new <span>auxiliary browsing context</span> must be
      created, with the <span>opener browsing context</span> being the
      current one. If the given browsing context name is not <code
      title="">_blank</code>, then the new auxiliary browsing context's
      name must be the given browsing context name (otherwise, it has
      no name). The chosen browsing context must be this new browsing
      context. If it is immediately <span
      title="navigate">navigated</span>, then the navigation will be
      done with <span>replacement enabled</span>.</dd>
@@ -35561,20 +35579,24 @@ at the first element with the given ID must be treated as if it was cloned and r
 
   <p>The <code title="rel-noreferrer">noreferrer</code> keyword may be
   used with <code>a</code> and <code>area</code> elements.</p>
 
   <p>If a user agent follows a link defined by an <code>a</code> or
   <code>area</code> element that has the <code
   title="rel-noreferrer">noreferrer</code> keyword, the user agent must
   not include a <code title="">Referer</code> HTTP header (or
   equivalent for other protocols) in the request.</p>
 
+  <p>This keyword also <a href="#noopener">causes the <code
+  title="dom-opener">opener</code> attribute to remain null</a> if the
+  hyperlink creates a new <span>browsing context</span>.</p>
+
 
   <h5>Link type "<dfn title="rel-pingback"><code>pingback</code></dfn>"</h5>
 
   <p>The <code title="rel-pingback">pingback</code> keyword may be
   used with <code>link</code> elements, for which it creates an <span
   title="external resource link">external resource link</span>.</p>
 
   <p>For the semantics of the <code
   title="rel-pingback">pingback</code> keyword, see the Pingback 1.0
   specification. <a href="#refsPINGBACK">[PINGBACK]</a></p>

|