Wes Bos & Scott Tolinski - Full Stack JavaScript Web Developers

Zpravodajství

Technologické zprávy

Technika

Hasty Treat - Target=_blank security issue? What's the deal with noopener and noreferrer?

Syntax - Tasty Web Development Treats

Full Stack Developers Wes Bos and Scott Tolinski dive deep into web development topics, explaining how they work and talking about their own experiences. They cover from JavaScript frameworks like React, to the latest advancements in CSS to simplifying web tooling.

<p class="has-line-data" data-line-start="7" data-line-end="8">In this Hasty Treat, Scott and Wes talk about noopener and noreferrer and why you should use them with links that have blank targets.</p> <h2 class="code-line" data-line-start="9" data-line-end="10"><a id= "Sentry__Sponsor_9" name="Sentry__Sponsor_9"></a>Sentry - Sponsor</h2> <p class="has-line-data" data-line-start="10" data-line-end="11">If you want to know what’s happening with your errors, track them with <a href="https://sentry.io/">Sentry</a>. Sentry is open-source error tracking that helps developers monitor and fix crashes in real time. Cut your time on error resolution from five hours to five minutes. It works with any language and integrates with dozens of other services. Syntax listeners can get two months for free by visiting <a href= "https://sentry.io/">Sentry.io</a> and using the coupon code “tastytreat”.</p> <h2 class="code-line" data-line-start="12" data-line-end="13"> <a id="Show_Notes_12" name="Show_Notes_12"></a>Show Notes</h2> <p class="has-line-data" data-line-start="14" data-line-end="15"> 03:35 - What’s the big deal?</p> <ul> <li class="has-line-data" data-line-start="16" data-line-end="17"> If you have a link that is target="_blank" you should add rel=“noopener” and rel=“noreferrer”</li> <li class="has-line-data" data-line-start="17" data-line-end="18"> Retail Me Not uses it</li> <li class="has-line-data" data-line-start="18" data-line-end="21"> Valid use cases: <ul> <li class="has-line-data" data-line-start="19" data-line-end="20"> Same domain change the page from a popup</li> <li class="has-line-data" data-line-start="20" data-line-end="21"> Cross domain changing page data</li> </ul> </li> <li class="has-line-data" data-line-start="21" data-line-end="23"> Example: <a href= "https://mathiasbynens.github.io/rel-noopener/">https://mathiasbynens.github.io/rel-noopener/</a></li> </ul> <p class="has-line-data" data-line-start="23" data-line-end="24"> 05:39 - Why doesn’t the browser just fix it?</p> <ul> <li class="has-line-data" data-line-start="25" data-line-end="26"> Safari did - You can use rel=“opener” to allow it</li> <li class="has-line-data" data-line-start="26" data-line-end="27"> Firefox did</li> <li class="has-line-data" data-line-start="27" data-line-end="28"> Chrome hasn’t yet</li> <li class="has-line-data" data-line-start="28" data-line-end="30"> <a href= "https://twitter.com/HugoGiraudel/status/801475801397030912">https://twitter.com/HugoGiraudel/status/801475801397030912</a></li> </ul> <p class="has-line-data" data-line-start="30" data-line-end="31"> 10:48 - Does this hurt SEO?</p> <ul> <li class="has-line-data" data-line-start="32" data-line-end="34"> It breaks analytics of the recipient site, turning a referral visit from your site into direct traffic, unless the link has UTM or similar tracking parameters. If you have a site where passing traffic offsite is part of the business model, links need an affiliate id instead.</li> </ul> <h2 class="code-line" data-line-start="34" data-line-end="35"> <a id="Links_34" name="Links_34"></a>Links</h2> <ul> <li class="has-line-data" data-line-start="35" data-line-end="37"> <a href="https://twitter.com/argyleink">@argyleink</a></li> </ul> <h2 class="code-line" data-line-start="37" data-line-end="38"> <a id="Tweet_us_your_tasty_treats_37" name= "Tweet_us_your_tasty_treats_37"></a>Tweet us your tasty treats!</h2> <ul> <li class="has-line-data" data-line-start="38" data-line-end="39"> <a href="https://www.instagram.com/stolinski/">Scott’s Instagram</a></li> <li class="has-line-data" data-line-start="39" data-line-end="40"> <a href= "https://www.instagram.com/LevelUpTutorials/">LevelUpTutorials Instagram</a></li> <li class="has-line-data" data-line-start="40" data-line-end="41"> <a href="https://www.instagram.com/wesbos/">Wes’ Instagram</a></li> <li class="has-line-data" data-line-start="41" data-line-end="42"> <a href="https://twitter.com/wesbos">Wes’ Twitter</a></li> <li class="has-line-data" data-line-start="42" data-line-end="43"> <a href="https://www.facebook.com/wesbos.developer">Wes’ Facebook</a></li> <li class="has-line-data" data-line-start="43" data-line-end="44"> <a href="https://twitter.com/stolinski">Scott’s Twitter</a></li> <li class="has-line-data" data-line-start="44" data-line-end="45"> Make sure to include <a href= "https://twitter.com/SyntaxFM">@SyntaxFM</a> in your tweets</li> </ul>

In this Hasty Treat, Scott and Wes talk about noopener and noreferrer and why you should use them with links that have blank targets.
 Sentry - Sponsor If you want to know what’s happening with your errors, track them with Sentry. Sentry is open-source error tracking that helps developers monitor and fix crashes in real time. Cut your time on error resolution from five hours to five minutes. It works with any language and integrates with dozens of other services. Syntax listeners can get two months for free by visiting Sentry.io and using the coupon code “tastytreat”.
 Show Notes 03:35 - What’s the big deal?
  If you have a link that is target="_blank" you should add rel=“noopener” and rel=“noreferrer”
 Retail Me Not uses it
 Valid use cases:  Same domain change the page from a popup
 Cross domain changing page data

 Example: https://mathiasbynens.github.io/rel-noopener/

  05:39 - Why doesn’t the browser just fix it?
  Safari did - You can use rel=“opener” to allow it
 Firefox did
 Chrome hasn’t yet
 https://twitter.com/HugoGiraudel/status/801475801397030912

  10:48 - Does this hurt SEO?
  It breaks analytics of the recipient site, turning a referral visit from your site into direct traffic, unless the link has UTM or similar tracking parameters. If you have a site where passing traffic offsite is part of the business model, links need an affiliate id instead.
  Links  @argyleink

  Tweet us your tasty treats!  Scott’s Instagram

 LevelUpTutorials Instagram

 Wes’ Instagram

 Wes’ Twitter

 Wes’ Facebook

 Scott’s Twitter

 Make sure to include @SyntaxFM in your tweets

Aplikace Youradio Talk

Pro přehrání dalších podcastů se prosím registrujte.

Hasty Treat - Target=_blank security issue? What's the deal with noopener and noreferrer?

Poslechněte si podcast