Add rel="noopener noreferrer" to target="_blank"

[auralon]

rel="noopener noreferrer" should be added to links containing target="_blank" as a precaution against reverse tabnabbing. For more information, please refer to the following article: https://www.jitbit.com/alexblog/256-targetblank---the-most-underestimated-vulnerability-ever/

[terryupton]

+1 for this.

[terryupton]

@auralon I think this might be as simple as adding this in to the attributes like so; {% set attributes = { rel: "noopener noreferrer" } %}

{{ block.linkTo.htmlLink(attributes) }}