Checks · security

Unsafe Cross-Origin Links

Warning security.unsafe_cross_origin_links

What it means

The page opens external links in a new tab without rel="noopener", giving the opened site a window.opener handle back to this one.

How to fix it

Add rel="noopener noreferrer" to every target="_blank" link pointing off-site.

Where to find it in Truelint

Open the Issues pane on the right of the workspace and select Unsafe Cross-Origin Links. The grid filters to every affected URL and the detail pane shows the specific finding for each. Export the list with Export → Current view, or from the API:

GET /api/v1/crawls/{handle}/issues/security.unsafe_cross_origin_links