No Opener, No Phishers

4.8(

9 ratings

)

ExtensionDeveloper Tools575 users

4 support issues

Stanton McCandlish

Oct 11, 2020

Another issue, and some questions

In addition to the comments already here, I note that other extensions (for this and other browsers) only apply fixes like this to links that have target="_blank" (or the technically invalid target=_blank without the quotation marks). Is there proof that the noopener tweak is needed beyond this?

Second, why is this also adding noreferrer? Is there proof that this is part of the exploit this extension aims to address? Doing noreferrer is going to break a lot of sites.

Third, this needs a settings panel, at very least for a whitelist for sites on which to not apply the extension. Clicking on the extension's icon should present an option to add the current site or specific page to that whitelist. Same way ad- and popup-blocker work. I use several sites that make use of the effect this extension disables, for legitimate reasons. E.g., one opens a file download page (with ads on it - it's how the shareware site makes enough money to continue operating) in a new tab, closes that tab when the download starts after a "time to look at the ads" timer, and in the interim has reloaded the page in the original tab, with some parameter changes in its URL so it adds a "last downloaded on" date to the page. Sites like this should not get broken by an extension of this sort.

This is a good start of a useful extension, and we certainly need a fix for this exploit, but it has some issues to resolve (not just the one I've raised). And there are some questions that need answers. If it's really necessary to add noreferrer, and to add both that parameter and noopener to more than _blank links, then this should be spelled out clearly on the main page of the extension.

Steve Graham

Jul 31, 2020

Feature Request: Site Whitelist

I've got a site I use daily (my email client) and I would love to have a simple whitelist feature.

If possible, it would also be awesome to see a console.log of what the site tries to use the noopener for (or maybe the link that causes the issue). I know that is a lot more work, so don't worry about it much; the above issue (whitelist) would be phenomenal!

Thanks for your work so far!

Ryan Freeman

Feb 7, 2018

Preserve existing REL value

The extension replaces the existing rel="" value, which causes some functionality problems.

The FB notifications link has rel="toggle", but that is removed when the extension is active. If the extension could be coded to preserve the existing REL values (except those that directly conflict with the ones added by the extension) it would be really helpful.

Thanks!

John-Robin Tell

Sep 1, 2016

Facebook

The extension breaks facebook.
With it activated you won't be able to open your notifications list, friend requests and messages at the top right of the page.