Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

docs: clarify docs for svelte/no-target-blank #656

Merged
merged 3 commits into from
Jan 3, 2024
+3 −3
Merged

docs: clarify docs for svelte/no-target-blank #656

Changes from all commits
Commits
Show all changes
3 commits
Select commit Hold shift + click to select a range
30531ff
docs: clarify meaning of `allowReferrer`
benmccann Jan 3, 2024
d5b69e3
Update no-target-blank.md
benmccann Jan 3, 2024
3ce7eb4
Update no-target-blank.md
benmccann Jan 3, 2024
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
6 changes: 3 additions & 3 deletions docs/rules/no-target-blank.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -12,7 +12,7 @@ since: 'v0.0.4'

## :book: Rule Details

This rule disallows using `target="_blank"` attribute without `rel="noopener noreferrer"` to avoid a security vulnerability([see here for more details](https://mathiasbynens.github.io/rel-noopener/)).
This rule disallows using `target="_blank"` attribute without `rel="noopener noreferrer"` to avoid a security vulnerability in legacy browsers where a page can trigger a navigation in the opener regardless of origin ([see here for more details](https://mathiasbynens.github.io/rel-noopener/)).

<ESLintCodeBlock>

Expand Down Expand Up @@ -46,8 +46,8 @@ This rule disallows using `target="_blank"` attribute without `rel="noopener nor
}
```

- `allowReferrer` ... If `true`, does not require noreferrer.default `false`
- `enforceDynamicLinks ("always" | "never")` ... If `always`, enforces the rule if the href is a dynamic link. default `always`.
- `allowReferrer` ... If `true`, allows the `Referrer` header to be sent by not requiring `noreferrer` to be present. default `false`
- `enforceDynamicLinks ("always" | "never")` ... If `always`, enforces the rule if the href is a dynamic link. default `always`

### `{ allowReferrer: false }` (default)

Expand Down
Loading