Feature: #107771 - Make rel attribute in external links configurable
See forge#107771
Description
For security reasons, external links that open in a new window should be
generated with rel="noopener" to prevent the opened page from
accessing the originating document via JavaScript's
Window. object.
TYPO3's default behavior is to add rel="noreferrer" to all such
links. This automatically implies rel="noopener" but is even more
restrictive, as it also prevents the HTTP Referer header from being sent to
the opened page. This may be too strict and therefore undesirable for some
website owners.
This feature introduces a new TypoScript option
config. to define the rel
attribute for external links. The default behavior remains
rel="noreferrer", but by setting the TypoScript property to
noopener, all external links are generated with
rel="noopener" instead.
The feature respects existing the individual settings of a link. Any existing
rel="noopener" and rel="noreferrer" values from other
sources are preserved.
Impact
A new TypoScript configuration option
config. is available and can be set to
noreferrer (default) or noopener.
This setting affects all external links with target="_.