Is the use of
noreferrer enough for links that use
target="_blank" in order to avoid reverse tabnabbing
For context here is an explanation of the issue:
- "Target=_blank - the most underestimated vulnerability ever"
- "About rel=noopener"
- Steemit article on tabnabbing performed on social media
So my question is: what's the consequence of forgetting to add also
nofollow (that I see used on most websites)?
Are there browsers that are affected by the lack of the last two attributes?
As far as I know the safest solution is to launch the link in a new tab from a temporary iframe but I see some websites out there using only noreferrer so I was wondering if there's some issue using only noreferrer.