Using rel="noopener" in window.open()

Question

So I know that I can apply rel="noopener in an a tag when using target="_blank". But I'm trying to pass it as an argument to window.open(), ie:

window.open('http://cats.com', '_blank', 'rel=noopener')

however it doesn't seem to be working the way that I expected, as the opener object still exists on the window after the user clicks on the link.

Is there something I'm missing? Or cannot it not be done the way that I'm intending?

I've found some great articles but they don't quite address my use case as far as I can tell.

https://developer.mozilla.org/en-US/docs/Web/API/Window/open https://mathiasbynens.github.io/rel-noopener/

Much appreciated.

Bibliophile

The window feature flag string, as used in window.open(), is just noopener and not rel=noopener. The solution suggested here has the best backwards and cross-browser compatibility, however. – Apocryphal

Answer 1

There is no direct example in doc but it can be used like this and it worked for me.

window.open('http://cats.com', '_blank', 'noopener,resizable,scrollbars')

Brainpan

It is available in the documentation here: developer.mozilla.org/en-US/docs/Web/API/Window/… as "Window functionality features" is part of the "Window features" is third argument of the window.open method. – Coliseum

Answer 2

Cover all your bases

The safest way to redirect is by adding noopener, noreferrer, and window.opener = null.

const openInNewTab = (url) => {
    const newWindow = window.open(url, '_blank', 'noopener,noreferrer')
    if (newWindow) newWindow.opener = null
}

Then call your new funtion

openInNewTab('https://stackoverflow.com')

The third param can also take these optional values, based on your needs.

Inanity

noreferrer implies noopener, so only the noreferrer is required to have them both active. "8. If noreferrer is true, then set noopener to true." from html.spec.whatwg.org/multipage/… – Overcareful

Answer 3

As far as I know, this cannot be achieved with window.open() arguments. There is, however, is a way to get the behavior:

var newWindow = window.open();
newWindow.opener = null;
newWindow.location = 'http://some.url';

Harrisharrisburg

not working in the latest chrome Version 88.0.4324.190 (Official Build) (64-bit). rel = 'noreferrer' worked for me – Headley

Answer 4

This worked for me:

const a = document.createElement("a")
a.href = args.url
a.target = "_blank"
a.rel = "noopener"
a.click()

Execution

So simple. Thanks! – Bibliophile

This does not answer the posters question and is not a good coding style as it creates a fake element instead of using a built in function. This should be the accepted answer: https://mcmap.net/q/498958/-using-rel-quot-noopener-quot-in-window-open – Ordeal