diff --git a/docs/rules/jsx-no-target-blank.md b/docs/rules/jsx-no-target-blank.md index dd0cdb4c9b..faaecda352 100644 --- a/docs/rules/jsx-no-target-blank.md +++ b/docs/rules/jsx-no-target-blank.md @@ -2,14 +2,14 @@ When creating a JSX element that has an `a` tag, it is often desired to have the link open in a new tab using the `target='_blank'` attribute. Using this -attribute unaccompanied by `rel='noreferrer noopener'`, however, is a severe -security vulnerability ([see here for more details](https://mathiasbynens.github.io/rel-noopener)) -This rules requires that you accompany `target='_blank'` attributes with `rel='noreferrer noopener'`. +attribute unaccompanied by `rel='noreferrer'`, however, is a severe +security vulnerability ([see here for more details](https://html.spec.whatwg.org/multipage/links.html#link-type-noopener)) +This rules requires that you accompany `target='_blank'` attributes with `rel='noreferrer'`. ## Rule Details This rule aims to prevent user generated links from creating security vulnerabilities by requiring -`rel='noreferrer noopener'` for external links, and optionally any dynamically generated links. +`rel='noreferrer'` for external links, and optionally any dynamically generated links. ## Rule Options ```json @@ -35,7 +35,7 @@ The following patterns are **not** considered errors: ```jsx var Hello =

-var Hello = +var Hello = var Hello = var Hello = var Hello = diff --git a/tests/lib/rules/jsx-no-target-blank.js b/tests/lib/rules/jsx-no-target-blank.js index eb90cbd6e3..6d5f15b08b 100644 --- a/tests/lib/rules/jsx-no-target-blank.js +++ b/tests/lib/rules/jsx-no-target-blank.js @@ -25,8 +25,8 @@ const parserOptions = { const ruleTester = new RuleTester({parserOptions}); const defaultErrors = [{ - message: 'Using target="_blank" without rel="noopener noreferrer" is a security risk:' + - ' see https://mathiasbynens.github.io/rel-noopener' + message: 'Using target="_blank" without rel="noreferrer" is a security risk:' + + ' see https://html.spec.whatwg.org/multipage/links.html#link-type-noopener' }]; ruleTester.run('jsx-no-target-blank', rule, { @@ -34,14 +34,14 @@ ruleTester.run('jsx-no-target-blank', rule, { {code: ''}, {code: ''}, {code: ''}, - {code: ''}, - {code: ''}, - {code: 's'}, - {code: ''}, + {code: ''}, + {code: ''}, + {code: 's'}, + {code: ''}, {code: '

'}, - {code: ''}, + {code: ''}, {code: ''}, - {code: ''}, + {code: ''}, {code: ''}, {code: ''}, { @@ -56,7 +56,7 @@ ruleTester.run('jsx-no-target-blank', rule, { code: '', errors: defaultErrors }, { - code: '', + code: '', errors: defaultErrors }, { code: '',