Title: target=&#8221;_blank&#8221; vulnerability?
Last modified: August 29, 2017

---

# target=”_blank” vulnerability?

 *  Resolved [treeliao](https://wordpress.org/support/users/treeliao/)
 * (@treeliao)
 * [8 years, 9 months ago](https://wordpress.org/support/topic/target_blank-vulnerability/)
 * Hello,
 * I have been using the beaver builder and it is awesome. I noticed that when adding
   a link to go with an image (open in a new window), target=”_blank” is added but
   without rel=”noopener”.
 * Considering that target=”_blank” is a rather subtle and widespread vulnerability
   and it is possible to be exploited, is there any way for us plugin users to manually
   add nonpener, or any consideration for updating this through beaver builder in
   the future?

Viewing 5 replies - 1 through 5 (of 5 total)

 *  Plugin Author [Simon Prosser](https://wordpress.org/support/users/pross/)
 * (@pross)
 * [8 years, 8 months ago](https://wordpress.org/support/topic/target_blank-vulnerability/#post-9523811)
 * Thankyou, this will be address in a future version.
 *  [one3rdnerd](https://wordpress.org/support/users/one3rdnerd/)
 * (@one3rdnerd)
 * [8 years, 5 months ago](https://wordpress.org/support/topic/target_blank-vulnerability/#post-9807674)
 * I see this was changed, can it be made optional? it’s widely reported that this
   breaks referral links from working.
 * [https://www.bforblogging.com/how-to-remove-rel-noopener-noreferrer-from-wordpress/](https://www.bforblogging.com/how-to-remove-rel-noopener-noreferrer-from-wordpress/)
 * This might be losing people a lot of commissions, I had wondered why my commissions
   have been down over the past few months and this may be a cause as my clicks 
   are down by traffic and rankings up.
 *  [one3rdnerd](https://wordpress.org/support/users/one3rdnerd/)
 * (@one3rdnerd)
 * [8 years, 5 months ago](https://wordpress.org/support/topic/target_blank-vulnerability/#post-9807676)
 * I see this was changed, can it be made optional? it’s widely reported that this
   breaks referral links from working.
 * [https://www.bforblogging.com/how-to-remove-rel-noopener-noreferrer-from-wordpress/](https://www.bforblogging.com/how-to-remove-rel-noopener-noreferrer-from-wordpress/)
 * This might be losing people a lot of commissions, I had wondered why my commissions
   have been down over the past few months and this may be a cause as my clicks 
   are down by traffic and rankings up.
 * Is this still the case or am I late to the party?
 *  Plugin Author [Simon Prosser](https://wordpress.org/support/users/pross/)
 * (@pross)
 * [8 years, 5 months ago](https://wordpress.org/support/topic/target_blank-vulnerability/#post-9844936)
 * Using target _blank without noopener is a well known, well documented security
   issue.
 * If it’s breaking an affiliate link, chances are the affiliate program needs to
   fix something on their end.
 * Your linked article seems to stress that its noreferrer that causes the issues,
   we only add noopener just like WP Core does for _blank links.
 * We can’t add it as an option because we’d be leaving sites open to a well known
   vulnerability.
 * If you absolutely must remove noopener from your _blank links then one easy way
   would be to use a jquery snippet to change the rel on all your links.
 *  [one3rdnerd](https://wordpress.org/support/users/one3rdnerd/)
 * (@one3rdnerd)
 * [8 years, 5 months ago](https://wordpress.org/support/topic/target_blank-vulnerability/#post-9845170)
 * Hi Simon,
 * Thanks for properly explaining this issue to me. I think I understand better 
   now and think the best and safest course of action is to contact each affiliate
   vendor I work with and perform some tests to ensure there are no issues as I 
   appreciate safety is paramount as we continue to evolve the web!
 * Happy new year!

Viewing 5 replies - 1 through 5 (of 5 total)

The topic ‘target=”_blank” vulnerability?’ is closed to new replies.

 * ![](https://ps.w.org/beaver-builder-lite-version/assets/icon-256x256.png?rev=
   2361183)
 * [Beaver Builder Page Builder - Drag and Drop Website Builder](https://wordpress.org/plugins/beaver-builder-lite-version/)
 * [Frequently Asked Questions](https://wordpress.org/plugins/beaver-builder-lite-version/#faq)
 * [Support Threads](https://wordpress.org/support/plugin/beaver-builder-lite-version/)
 * [Active Topics](https://wordpress.org/support/plugin/beaver-builder-lite-version/active/)
 * [Unresolved Topics](https://wordpress.org/support/plugin/beaver-builder-lite-version/unresolved/)
 * [Reviews](https://wordpress.org/support/plugin/beaver-builder-lite-version/reviews/)

 * 5 replies
 * 3 participants
 * Last reply from: [one3rdnerd](https://wordpress.org/support/users/one3rdnerd/)
 * Last activity: [8 years, 5 months ago](https://wordpress.org/support/topic/target_blank-vulnerability/#post-9845170)
 * Status: resolved