[PR #1720] Fix opening links with noreferrer #1702

New issue

Open

opened 2026-05-07 01:03:18 +02:00 by BreizhHardware · 0 comments

BreizhHardware commented

2026-05-07 01:03:18 +02:00

Owner

📋 Pull Request Information

Original PR: https://github.com/binwiederhier/ntfy/pull/1720
Author: @dmitrylyzo
Created: 4/28/2026
Status: 🔄 Open

Base: main ← Head: fix-noreferrer

📝 Commits (1)

6ba3b7c Fix opening links with noreferrer

📊 Changes

2 files changed (+2 additions, -2 deletions)

View changed files

📝 web/src/app/utils.js (+1 -1)
📝 web/src/components/Notifications.jsx (+1 -1)

📄 Description

rel="noreferrer" has the same effect as rel="noopener", but also prevents the Referer header from being sent to the new page.
https://mui.com/material-ui/react-link/#security

If this feature is set, the browser will omit the Referer header, as well as set noopener to true.
https://developer.mozilla.org/en-US/docs/Web/API/Window/open#noreferrer

Changes
Drop noopener if noreferrer is set.

Issues
N/A
The Referer header is sent to the server.

Notes
The value of the rel attribute must be space-separated.
https://developer.mozilla.org/en-US/docs/Web/HTML/Reference/Attributes/rel

_{🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.}

## 📋 Pull Request Information **Original PR:** https://github.com/binwiederhier/ntfy/pull/1720 **Author:** [@dmitrylyzo](https://github.com/dmitrylyzo) **Created:** 4/28/2026 **Status:** 🔄 Open **Base:** `main` ← **Head:** `fix-noreferrer` --- ### 📝 Commits (1) - [`6ba3b7c`](https://github.com/binwiederhier/ntfy/commit/6ba3b7c8be51ecb1fd1d80883d9768a758e84a4c) Fix opening links with noreferrer ### 📊 Changes **2 files changed** (+2 additions, -2 deletions) <details> <summary>View changed files</summary> 📝 `web/src/app/utils.js` (+1 -1) 📝 `web/src/components/Notifications.jsx` (+1 -1) </details> ### 📄 Description `rel="noreferrer"` has the same effect as `rel="noopener"`, but also prevents the `Referer` header from being sent to the new page. https://mui.com/material-ui/react-link/#security If this feature is set, the browser will omit the `Referer` header, as well as set `noopener` to true. https://developer.mozilla.org/en-US/docs/Web/API/Window/open#noreferrer **Changes** Drop `noopener` if `noreferrer` is set. **Issues** N/A The `Referer` header is sent to the server. **Notes** The value of the `rel` attribute must be space-separated. https://developer.mozilla.org/en-US/docs/Web/HTML/Reference/Attributes/rel --- <sub>🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.</sub>