Unsafe external links checker
What is an Unsafe External Links Checker?
The Unsafe External Links Checker finds links pointing to other domains that are missing rel="noopener" or rel="noreferrer", which protect against a known browser vulnerability called reverse tabnabbing.
What Is Reverse Tabnabbing?
- The exploit — When a link uses
target="_blank"withoutrel="noopener", the newly opened page can accesswindow.openerand silently redirect the original tab to a phishing page. - Simple fix — Adding
rel="noopener noreferrer"to any external link that opens in a new tab closes this gap entirely. - Modern browsers help — Recent browser versions apply noopener behavior by default for
target="_blank"links, but explicitly setting it remains best practice for compatibility.