Checks for target="_blank" links without rel="noopener".
This check looks for links that open in a new tab (`target='_blank'`) but are missing the `rel='noopener'` attribute.
When you link to another site with `target='_blank'`, the new page gains partial access to the original page through the `window.opener` object. A malicious page could potentially change the original page's location to a phishing site.
It's a security vulnerability. The `rel='noopener'` attribute prevents this access and secures your page.
<!-- Unsafe Link -->
<a href="https://example.com" target="_blank">Click Here</a>
<!-- Safe Link -->
<a href="https://example.com" target="_blank" rel="noopener noreferrer">Click Here</a>Run a free audit to see how your site performs on Unsafe Cross-Origin Links and 159 other checks.
Start Free AuditVerifies the validity and configuration of the SSL certificate.
Checks if the site is secured with a valid SSL certificate.
Ensures that HTTP traffic is automatically redirected to HTTPS.
Checks for insecure (HTTP) resources on a secure (HTTPS) page.